<data xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<row _id="1"><ip.session_id>1</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>0.029412031173706055</duration><ip.header_len>20</ip.header_len><ip.payload_len>32</ip.payload_len><ip.avg_bytes_tot_len>114.0</ip.avg_bytes_tot_len><time_between_pkts_sum>29.412031173706055</time_between_pkts_sum><time_between_pkts_avg>29.412031173706055</time_between_pkts_avg><time_between_pkts_max>29.412031173706055</time_between_pkts_max><time_between_pkts_min>29.412031173706055</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>33.99969196598656</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>33.99969196598656</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59602</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59602</min_tcp_pkts><max_tcp_pkts>59602</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="2"><ip.session_id>1</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>0.0</duration><ip.header_len>20</ip.header_len><ip.payload_len>156</ip.payload_len><ip.avg_bytes_tot_len>114.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.0</pkts_rate><tcp_bytes_per_flow>124</tcp_bytes_per_flow><byte_rate>0.0</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>1</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>22</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>22</min_tcp_pkts><max_tcp_pkts>22</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>124</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>124</min_tcp_len><max_tcp_len>124</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="3"><ip.session_id>2</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>12</ip.pkts_per_flow><duration>11.158972978591919</duration><ip.header_len>240</ip.header_len><ip.payload_len>240</ip.payload_len><ip.avg_bytes_tot_len>40.0</ip.avg_bytes_tot_len><time_between_pkts_sum>9500.360012054443</time_between_pkts_sum><time_between_pkts_avg>791.6966676712036</time_between_pkts_avg><time_between_pkts_max>1001.168966293335</time_between_pkts_max><time_between_pkts_min>123.36111068725586</time_between_pkts_min><time_between_pkts_std>378.4124883300136</time_between_pkts_std><(-0.001, 50.0]>0</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>2</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>1</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>0</tcp_pkts_per_flow><pkts_rate>0.0</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.0</byte_rate><tcp.tcp_session_payload_up_len>0</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>0</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>0</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>0</dport_le><mean_tcp_pkts>0</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>0</min_tcp_pkts><max_tcp_pkts>0</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="4"><ip.session_id>4</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>2</ip.pkts_per_flow><duration>8.22860312461853</duration><ip.header_len>40</ip.header_len><ip.payload_len>28</ip.payload_len><ip.avg_bytes_tot_len>34.0</ip.avg_bytes_tot_len><time_between_pkts_sum>70.18399238586426</time_between_pkts_sum><time_between_pkts_avg>35.09199619293213</time_between_pkts_avg><time_between_pkts_max>70.18399238586426</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>49.62757694678964</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>1</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>0</tcp_pkts_per_flow><pkts_rate>0.0</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.0</byte_rate><tcp.tcp_session_payload_up_len>0</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>0</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>0</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>0</dport_le><mean_tcp_pkts>0</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>0</min_tcp_pkts><max_tcp_pkts>0</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="5"><ip.session_id>4</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>2</ip.pkts_per_flow><duration>8.22881293296814</duration><ip.header_len>40</ip.header_len><ip.payload_len>28</ip.payload_len><ip.avg_bytes_tot_len>34.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.15282630920410156</time_between_pkts_sum><time_between_pkts_avg>0.07641315460205078</time_between_pkts_avg><time_between_pkts_max>0.102996826171875</time_between_pkts_max><time_between_pkts_min>0.04982948303222656</time_between_pkts_min><time_between_pkts_std>0.03759498887171748</time_between_pkts_std><(-0.001, 50.0]>2</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>0</tcp_pkts_per_flow><pkts_rate>0.0</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.0</byte_rate><tcp.tcp_session_payload_up_len>0</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>0</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>0</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>0</dport_le><mean_tcp_pkts>0</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>0</min_tcp_pkts><max_tcp_pkts>0</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="6"><ip.session_id>5</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.22860312461853</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.12152730966063684</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.12152730966063684</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>58830</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>58830</min_tcp_pkts><max_tcp_pkts>58830</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="7"><ip.session_id>5</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.228763103485107</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.05698204040527344</time_between_pkts_sum><time_between_pkts_avg>0.05698204040527344</time_between_pkts_avg><time_between_pkts_max>0.05698204040527344</time_between_pkts_max><time_between_pkts_min>0.05698204040527344</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.12152494699676948</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.12152494699676948</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>443</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>443</min_tcp_pkts><max_tcp_pkts>443</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="8"><ip.session_id>6</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.22860312461853</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>40.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.12152730966063684</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.12152730966063684</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>58830</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>58830</min_tcp_pkts><max_tcp_pkts>58830</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="9"><ip.session_id>6</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.228858947753906</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>40.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04601478576660156</time_between_pkts_sum><time_between_pkts_avg>0.04601478576660156</time_between_pkts_avg><time_between_pkts_max>0.04601478576660156</time_between_pkts_max><time_between_pkts_min>0.04601478576660156</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1215235315551196</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1215235315551196</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>80</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>80</min_tcp_pkts><max_tcp_pkts>80</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="10"><ip.session_id>7</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.386479139328003</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>157.62019157409668</time_between_pkts_sum><time_between_pkts_avg>157.62019157409668</time_between_pkts_avg><time_between_pkts_max>157.62019157409668</time_between_pkts_max><time_between_pkts_min>157.62019157409668</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>0</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>1</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11923955016003636</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11923955016003636</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="11"><ip.session_id>7</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.386577129364014</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.09799003601074219</time_between_pkts_sum><time_between_pkts_avg>0.09799003601074219</time_between_pkts_avg><time_between_pkts_max>0.09799003601074219</time_between_pkts_max><time_between_pkts_min>0.09799003601074219</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11923815694709217</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11923815694709217</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>21</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>21</min_tcp_pkts><max_tcp_pkts>21</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="12"><ip.session_id>8</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.386479139328003</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11923955016003636</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11923955016003636</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="13"><ip.session_id>8</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.386621952056885</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04482269287109375</time_between_pkts_sum><time_between_pkts_avg>0.04482269287109375</time_between_pkts_avg><time_between_pkts_max>0.04482269287109375</time_between_pkts_max><time_between_pkts_min>0.04482269287109375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1192375196731912</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1192375196731912</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>110</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>110</min_tcp_pkts><max_tcp_pkts>110</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="14"><ip.session_id>9</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.386479139328003</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11923955016003636</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11923955016003636</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="15"><ip.session_id>9</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.386641025543213</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.019073486328125</time_between_pkts_sum><time_between_pkts_avg>0.019073486328125</time_between_pkts_avg><time_between_pkts_max>0.019073486328125</time_between_pkts_max><time_between_pkts_min>0.019073486328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11923724849487388</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11923724849487388</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>587</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>587</min_tcp_pkts><max_tcp_pkts>587</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="16"><ip.session_id>10</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.386656045913696</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015020370483398438</time_between_pkts_sum><time_between_pkts_avg>0.015020370483398438</time_between_pkts_avg><time_between_pkts_max>0.015020370483398438</time_between_pkts_max><time_between_pkts_min>0.015020370483398438</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11923703494281714</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11923703494281714</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="17"><ip.session_id>10</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.38670301437378</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04696846008300781</time_between_pkts_sum><time_between_pkts_avg>0.04696846008300781</time_between_pkts_avg><time_between_pkts_max>0.04696846008300781</time_between_pkts_max><time_between_pkts_min>0.04696846008300781</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11923636717386114</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11923636717386114</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>993</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>993</min_tcp_pkts><max_tcp_pkts>993</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="18"><ip.session_id>11</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.386656045913696</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11923703494281714</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11923703494281714</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="19"><ip.session_id>11</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.386714935302734</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.011920928955078125</time_between_pkts_max><time_between_pkts_min>0.011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11923619769054462</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11923619769054462</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>135</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>135</min_tcp_pkts><max_tcp_pkts>135</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="20"><ip.session_id>12</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.386656045913696</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11923703494281714</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11923703494281714</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="21"><ip.session_id>12</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.38673710823059</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.022172927856445312</time_between_pkts_sum><time_between_pkts_avg>0.022172927856445312</time_between_pkts_avg><time_between_pkts_max>0.022172927856445312</time_between_pkts_max><time_between_pkts_min>0.022172927856445312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1192358824528574</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1192358824528574</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>113</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>113</min_tcp_pkts><max_tcp_pkts>113</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="22"><ip.session_id>13</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>2</ip.pkts_per_flow><duration>8.417683124542236</duration><ip.header_len>40</ip.header_len><ip.payload_len>44</ip.payload_len><ip.avg_bytes_tot_len>42.666666666666664</ip.avg_bytes_tot_len><time_between_pkts_sum>30.727148056030273</time_between_pkts_sum><time_between_pkts_avg>15.363574028015137</time_between_pkts_avg><time_between_pkts_max>29.455184936523438</time_between_pkts_max><time_between_pkts_min>1.271963119506836</time_between_pkts_min><time_between_pkts_std>19.92854726249709</time_between_pkts_std><(-0.001, 50.0]>2</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>2</tcp_pkts_per_flow><pkts_rate>0.237595068667872</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.237595068667872</byte_rate><tcp.tcp_session_payload_up_len>2</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>2</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>2</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>2</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>2</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="23"><ip.session_id>13</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.388061046600342</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.666666666666664</ip.avg_bytes_tot_len><time_between_pkts_sum>0.051975250244140625</time_between_pkts_sum><time_between_pkts_avg>0.051975250244140625</time_between_pkts_avg><time_between_pkts_max>0.051975250244140625</time_between_pkts_max><time_between_pkts_min>0.051975250244140625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11921706273290622</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11921706273290622</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>22</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>22</min_tcp_pkts><max_tcp_pkts>22</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="24"><ip.session_id>14</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.388137102127075</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.07605552673339844</time_between_pkts_sum><time_between_pkts_avg>0.07605552673339844</time_between_pkts_avg><time_between_pkts_max>0.07605552673339844</time_between_pkts_max><time_between_pkts_min>0.07605552673339844</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11921598178771048</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11921598178771048</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="25"><ip.session_id>14</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.388148069381714</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11921582591635266</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11921582591635266</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>25</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>25</min_tcp_pkts><max_tcp_pkts>25</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="26"><ip.session_id>15</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.388154029846191</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11921574120382913</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11921574120382913</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="27"><ip.session_id>15</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.388159036636353</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11921567004540241</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11921567004540241</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>80</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>80</min_tcp_pkts><max_tcp_pkts>80</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="28"><ip.session_id>16</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.388204097747803</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04506111145019531</time_between_pkts_sum><time_between_pkts_avg>0.04506111145019531</time_between_pkts_avg><time_between_pkts_max>0.04506111145019531</time_between_pkts_max><time_between_pkts_min>0.04506111145019531</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11921502962338455</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11921502962338455</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="29"><ip.session_id>16</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.388227939605713</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02384185791015625</time_between_pkts_sum><time_between_pkts_avg>0.02384185791015625</time_between_pkts_avg><time_between_pkts_max>0.02384185791015625</time_between_pkts_max><time_between_pkts_min>0.02384185791015625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11921469077853943</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11921469077853943</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>554</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>554</min_tcp_pkts><max_tcp_pkts>554</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="30"><ip.session_id>17</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.419565916061401</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>1.882791519165039</time_between_pkts_sum><time_between_pkts_avg>1.882791519165039</time_between_pkts_avg><time_between_pkts_max>1.882791519165039</time_between_pkts_max><time_between_pkts_min>1.882791519165039</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1187709687137637</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1187709687137637</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="31"><ip.session_id>17</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.419610977172852</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04506111145019531</time_between_pkts_sum><time_between_pkts_avg>0.04506111145019531</time_between_pkts_avg><time_between_pkts_max>0.04506111145019531</time_between_pkts_max><time_between_pkts_min>0.04506111145019531</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11877033306065898</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11877033306065898</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>256</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>256</min_tcp_pkts><max_tcp_pkts>256</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="32"><ip.session_id>18</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.419704914093018</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.09393692016601562</time_between_pkts_sum><time_between_pkts_avg>0.09393692016601562</time_between_pkts_avg><time_between_pkts_max>0.09393692016601562</time_between_pkts_max><time_between_pkts_min>0.09393692016601562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1187690079644224</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1187690079644224</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="33"><ip.session_id>18</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.419728994369507</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.024080276489257812</time_between_pkts_sum><time_between_pkts_avg>0.024080276489257812</time_between_pkts_avg><time_between_pkts_max>0.024080276489257812</time_between_pkts_max><time_between_pkts_min>0.024080276489257812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876866828715345</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876866828715345</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>139</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>139</min_tcp_pkts><max_tcp_pkts>139</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="34"><ip.session_id>19</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.419704914093018</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1187690079644224</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1187690079644224</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="35"><ip.session_id>19</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.419790029525757</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.06103515625</time_between_pkts_sum><time_between_pkts_avg>0.06103515625</time_between_pkts_avg><time_between_pkts_max>0.06103515625</time_between_pkts_max><time_between_pkts_min>0.06103515625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876780733169005</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876780733169005</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5900</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5900</min_tcp_pkts><max_tcp_pkts>5900</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="36"><ip.session_id>20</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.419803142547607</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.013113021850585938</time_between_pkts_sum><time_between_pkts_avg>0.013113021850585938</time_between_pkts_avg><time_between_pkts_max>0.013113021850585938</time_between_pkts_max><time_between_pkts_min>0.013113021850585938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876762236241864</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876762236241864</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="37"><ip.session_id>20</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.419824123382568</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876732641278276</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876732641278276</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>53</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>53</min_tcp_pkts><max_tcp_pkts>53</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="38"><ip.session_id>21</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.419803142547607</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876762236241864</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876762236241864</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="39"><ip.session_id>21</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.419872045516968</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04792213439941406</time_between_pkts_sum><time_between_pkts_avg>0.04792213439941406</time_between_pkts_avg><time_between_pkts_max>0.04792213439941406</time_between_pkts_max><time_between_pkts_min>0.04792213439941406</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876665044244167</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876665044244167</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1723</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1723</min_tcp_pkts><max_tcp_pkts>1723</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="40"><ip.session_id>22</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.419803142547607</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876762236241864</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876762236241864</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="41"><ip.session_id>22</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.419894933700562</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02288818359375</time_between_pkts_sum><time_between_pkts_avg>0.02288818359375</time_between_pkts_avg><time_between_pkts_max>0.02288818359375</time_between_pkts_max><time_between_pkts_min>0.02288818359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876632759365062</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876632759365062</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8888</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8888</min_tcp_pkts><max_tcp_pkts>8888</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="42"><ip.session_id>23</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.419803142547607</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876762236241864</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876762236241864</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="43"><ip.session_id>23</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.41991901397705</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.024080276489257812</time_between_pkts_sum><time_between_pkts_avg>0.024080276489257812</time_between_pkts_avg><time_between_pkts_max>0.024080276489257812</time_between_pkts_max><time_between_pkts_min>0.024080276489257812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876598793171309</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876598793171309</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>443</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>443</min_tcp_pkts><max_tcp_pkts>443</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="44"><ip.session_id>24</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.41992998123169</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876583323484091</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876583323484091</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="45"><ip.session_id>24</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.419964075088501</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03314018249511719</time_between_pkts_sum><time_between_pkts_avg>0.03314018249511719</time_between_pkts_avg><time_between_pkts_max>0.03314018249511719</time_between_pkts_max><time_between_pkts_min>0.03314018249511719</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876535233192062</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876535233192062</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>23</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>23</min_tcp_pkts><max_tcp_pkts>23</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="46"><ip.session_id>25</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.419930934906006</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876581978295803</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876581978295803</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="47"><ip.session_id>25</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.420002937316895</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03886222839355469</time_between_pkts_sum><time_between_pkts_avg>0.03886222839355469</time_between_pkts_avg><time_between_pkts_max>0.03886222839355469</time_between_pkts_max><time_between_pkts_min>0.03886222839355469</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876480417460027</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876480417460027</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>995</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>995</min_tcp_pkts><max_tcp_pkts>995</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="48"><ip.session_id>26</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.419930934906006</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876581978295803</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876581978295803</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="49"><ip.session_id>26</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.4200119972229</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876467638405044</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876467638405044</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>111</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>111</min_tcp_pkts><max_tcp_pkts>111</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="50"><ip.session_id>27</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.419930934906006</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876581978295803</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876581978295803</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="51"><ip.session_id>27</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.420045137405396</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03314018249511719</time_between_pkts_sum><time_between_pkts_avg>0.03314018249511719</time_between_pkts_avg><time_between_pkts_max>0.03314018249511719</time_between_pkts_max><time_between_pkts_min>0.03314018249511719</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1187642089420136</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1187642089420136</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>199</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>199</min_tcp_pkts><max_tcp_pkts>199</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="52"><ip.session_id>28</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>2</ip.pkts_per_flow><duration>8.450720071792603</duration><ip.header_len>40</ip.header_len><ip.payload_len>44</ip.payload_len><ip.avg_bytes_tot_len>42.666666666666664</ip.avg_bytes_tot_len><time_between_pkts_sum>30.334949493408203</time_between_pkts_sum><time_between_pkts_avg>15.167474746704102</time_between_pkts_avg><time_between_pkts_max>30.26413917541504</time_between_pkts_max><time_between_pkts_min>0.07081031799316406</time_between_pkts_min><time_between_pkts_std>21.34990758167848</time_between_pkts_std><(-0.001, 50.0]>2</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>2</tcp_pkts_per_flow><pkts_rate>0.23666622287912933</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.23666622287912933</byte_rate><tcp.tcp_session_payload_up_len>2</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>2</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>2</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>2</sport_g><sport_le>0</sport_le><dport_g>2</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="53"><ip.session_id>28</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.420182943344116</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.666666666666664</ip.avg_bytes_tot_len><time_between_pkts_sum>0.06699562072753906</time_between_pkts_sum><time_between_pkts_avg>0.06699562072753906</time_between_pkts_avg><time_between_pkts_max>0.06699562072753906</time_between_pkts_max><time_between_pkts_min>0.06699562072753906</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876226522969645</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876226522969645</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8080</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8080</min_tcp_pkts><max_tcp_pkts>8080</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="54"><ip.session_id>29</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.420193910598755</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.118762110542522</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.118762110542522</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="55"><ip.session_id>29</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.42024302482605</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.049114227294921875</time_between_pkts_sum><time_between_pkts_avg>0.049114227294921875</time_between_pkts_avg><time_between_pkts_max>0.049114227294921875</time_between_pkts_max><time_between_pkts_min>0.049114227294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876141781794458</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876141781794458</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1025</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1025</min_tcp_pkts><max_tcp_pkts>1025</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="56"><ip.session_id>30</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.420193910598755</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.118762110542522</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.118762110542522</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="57"><ip.session_id>30</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.42027997970581</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03695487976074219</time_between_pkts_sum><time_between_pkts_avg>0.03695487976074219</time_between_pkts_avg><time_between_pkts_max>0.03695487976074219</time_between_pkts_max><time_between_pkts_min>0.03695487976074219</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876089659846895</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876089659846895</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>143</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>143</min_tcp_pkts><max_tcp_pkts>143</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="58"><ip.session_id>31</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.420193910598755</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.118762110542522</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.118762110542522</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="59"><ip.session_id>31</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.420319080352783</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03910064697265625</time_between_pkts_sum><time_between_pkts_avg>0.03910064697265625</time_between_pkts_avg><time_between_pkts_max>0.03910064697265625</time_between_pkts_max><time_between_pkts_min>0.03910064697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876034511961789</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876034511961789</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3389</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3389</min_tcp_pkts><max_tcp_pkts>3389</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="60"><ip.session_id>32</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.420193910598755</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.118762110542522</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.118762110542522</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="61"><ip.session_id>32</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.420330047607422</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11876019043744526</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11876019043744526</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3306</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3306</min_tcp_pkts><max_tcp_pkts>3306</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="62"><ip.session_id>33</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.420356035232544</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1187598239095579</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1187598239095579</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="63"><ip.session_id>33</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.420378923416138</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02288818359375</time_between_pkts_sum><time_between_pkts_avg>0.02288818359375</time_between_pkts_avg><time_between_pkts_max>0.02288818359375</time_between_pkts_max><time_between_pkts_min>0.02288818359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11875950109787947</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11875950109787947</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1720</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1720</min_tcp_pkts><max_tcp_pkts>1720</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="64"><ip.session_id>34</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.420356035232544</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1187598239095579</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1187598239095579</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="65"><ip.session_id>34</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.420411109924316</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03218650817871094</time_between_pkts_sum><time_between_pkts_avg>0.03218650817871094</time_between_pkts_avg><time_between_pkts_max>0.03218650817871094</time_between_pkts_max><time_between_pkts_min>0.03218650817871094</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11875904714692584</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11875904714692584</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>445</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>445</min_tcp_pkts><max_tcp_pkts>445</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="66"><ip.session_id>35</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.420356035232544</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1187598239095579</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1187598239095579</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="67"><ip.session_id>35</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.420443058013916</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.031948089599609375</time_between_pkts_sum><time_between_pkts_avg>0.031948089599609375</time_between_pkts_avg><time_between_pkts_max>0.031948089599609375</time_between_pkts_max><time_between_pkts_min>0.031948089599609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11875859656200377</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11875859656200377</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6547</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6547</min_tcp_pkts><max_tcp_pkts>6547</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="68"><ip.session_id>36</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.420356035232544</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1187598239095579</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1187598239095579</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="69"><ip.session_id>36</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.420455932617188</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.012874603271484375</time_between_pkts_sum><time_between_pkts_avg>0.012874603271484375</time_between_pkts_avg><time_between_pkts_max>0.012874603271484375</time_between_pkts_max><time_between_pkts_min>0.012874603271484375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1187584149839719</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1187584149839719</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3006</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3006</min_tcp_pkts><max_tcp_pkts>3006</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="70"><ip.session_id>37</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.45198392868042</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>1.2638568878173828</time_between_pkts_sum><time_between_pkts_avg>1.2638568878173828</time_between_pkts_avg><time_between_pkts_max>1.2638568878173828</time_between_pkts_max><time_between_pkts_min>1.2638568878173828</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831541664515761</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831541664515761</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="71"><ip.session_id>37</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452031135559082</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.047206878662109375</time_between_pkts_sum><time_between_pkts_avg>0.047206878662109375</time_between_pkts_avg><time_between_pkts_max>0.047206878662109375</time_between_pkts_max><time_between_pkts_min>0.047206878662109375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831475582157239</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831475582157239</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9002</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9002</min_tcp_pkts><max_tcp_pkts>9002</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="72"><ip.session_id>38</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452045917510986</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014781951904296875</time_between_pkts_sum><time_between_pkts_avg>0.014781951904296875</time_between_pkts_avg><time_between_pkts_max>0.014781951904296875</time_between_pkts_max><time_between_pkts_min>0.014781951904296875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831454889853302</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831454889853302</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="73"><ip.session_id>38</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.45206093788147</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015020370483398438</time_between_pkts_sum><time_between_pkts_avg>0.015020370483398438</time_between_pkts_avg><time_between_pkts_max>0.015020370483398438</time_between_pkts_max><time_between_pkts_min>0.015020370483398438</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831433863876667</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831433863876667</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>49158</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>49158</min_tcp_pkts><max_tcp_pkts>49158</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="74"><ip.session_id>39</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452045917510986</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831454889853302</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831454889853302</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="75"><ip.session_id>39</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452121019363403</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.06008148193359375</time_between_pkts_sum><time_between_pkts_avg>0.06008148193359375</time_between_pkts_avg><time_between_pkts_max>0.06008148193359375</time_between_pkts_max><time_between_pkts_min>0.06008148193359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831349760717434</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831349760717434</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>211</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>211</min_tcp_pkts><max_tcp_pkts>211</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="76"><ip.session_id>40</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452045917510986</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831454889853302</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831454889853302</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="77"><ip.session_id>40</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.45213007926941</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831337078598755</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831337078598755</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6839</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6839</min_tcp_pkts><max_tcp_pkts>6839</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="78"><ip.session_id>41</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452144145965576</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014066696166992188</time_between_pkts_sum><time_between_pkts_avg>0.014066696166992188</time_between_pkts_avg><time_between_pkts_max>0.014066696166992188</time_between_pkts_max><time_between_pkts_min>0.014066696166992188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831317387994685</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831317387994685</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="79"><ip.session_id>41</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452166080474854</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02193450927734375</time_between_pkts_sum><time_between_pkts_avg>0.02193450927734375</time_between_pkts_avg><time_between_pkts_max>0.02193450927734375</time_between_pkts_max><time_between_pkts_min>0.02193450927734375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831286684132675</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831286684132675</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32785</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32785</min_tcp_pkts><max_tcp_pkts>32785</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="80"><ip.session_id>42</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452144145965576</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831317387994685</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831317387994685</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="81"><ip.session_id>42</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.45217514038086</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831274002149221</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831274002149221</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>18040</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>18040</min_tcp_pkts><max_tcp_pkts>18040</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="82"><ip.session_id>43</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452144145965576</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831317387994685</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831317387994685</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="83"><ip.session_id>43</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452189922332764</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014781951904296875</time_between_pkts_sum><time_between_pkts_avg>0.014781951904296875</time_between_pkts_avg><time_between_pkts_max>0.014781951904296875</time_between_pkts_max><time_between_pkts_min>0.014781951904296875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831253310550371</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831253310550371</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9102</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9102</min_tcp_pkts><max_tcp_pkts>9102</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="84"><ip.session_id>44</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452144145965576</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831317387994685</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831317387994685</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="85"><ip.session_id>44</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452203035354614</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.013113021850585938</time_between_pkts_sum><time_between_pkts_avg>0.013113021850585938</time_between_pkts_avg><time_between_pkts_max>0.013113021850585938</time_between_pkts_max><time_between_pkts_min>0.013113021850585938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1183123495516036</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1183123495516036</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>42</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>42</min_tcp_pkts><max_tcp_pkts>42</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="86"><ip.session_id>45</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452144145965576</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831317387994685</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831317387994685</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="87"><ip.session_id>45</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452233076095581</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030040740966796875</time_between_pkts_sum><time_between_pkts_avg>0.030040740966796875</time_between_pkts_avg><time_between_pkts_max>0.030040740966796875</time_between_pkts_max><time_between_pkts_min>0.030040740966796875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831192904845204</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831192904845204</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32778</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32778</min_tcp_pkts><max_tcp_pkts>32778</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="88"><ip.session_id>46</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452144145965576</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831317387994685</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831317387994685</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="89"><ip.session_id>46</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452255964279175</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02288818359375</time_between_pkts_sum><time_between_pkts_avg>0.02288818359375</time_between_pkts_avg><time_between_pkts_max>0.02288818359375</time_between_pkts_max><time_between_pkts_min>0.02288818359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831160866710477</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831160866710477</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9575</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9575</min_tcp_pkts><max_tcp_pkts>9575</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="90"><ip.session_id>47</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452144145965576</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831317387994685</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831317387994685</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="91"><ip.session_id>47</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452281951904297</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831124490288687</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831124490288687</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7911</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7911</min_tcp_pkts><max_tcp_pkts>7911</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="92"><ip.session_id>48</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452144145965576</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831317387994685</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831317387994685</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="93"><ip.session_id>48</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452294111251831</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.012159347534179688</time_between_pkts_sum><time_between_pkts_avg>0.012159347534179688</time_between_pkts_avg><time_between_pkts_max>0.012159347534179688</time_between_pkts_max><time_between_pkts_min>0.012159347534179688</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831107470204849</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831107470204849</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2048</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2048</min_tcp_pkts><max_tcp_pkts>2048</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="94"><ip.session_id>49</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452317953109741</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02384185791015625</time_between_pkts_sum><time_between_pkts_avg>0.02384185791015625</time_between_pkts_avg><time_between_pkts_max>0.02384185791015625</time_between_pkts_max><time_between_pkts_min>0.02384185791015625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831074097633587</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831074097633587</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="95"><ip.session_id>49</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452337980270386</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02002716064453125</time_between_pkts_sum><time_between_pkts_avg>0.02002716064453125</time_between_pkts_avg><time_between_pkts_max>0.02002716064453125</time_between_pkts_max><time_between_pkts_min>0.02002716064453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831046064819223</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831046064819223</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7920</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7920</min_tcp_pkts><max_tcp_pkts>7920</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="96"><ip.session_id>50</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452317953109741</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831074097633587</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831074097633587</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="97"><ip.session_id>50</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452347993850708</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831032048461856</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831032048461856</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1296</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1296</min_tcp_pkts><max_tcp_pkts>1296</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="98"><ip.session_id>51</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452317953109741</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831074097633587</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831074097633587</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="99"><ip.session_id>51</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452378034591675</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030040740966796875</time_between_pkts_sum><time_between_pkts_avg>0.030040740966796875</time_between_pkts_avg><time_between_pkts_max>0.030040740966796875</time_between_pkts_max><time_between_pkts_min>0.030040740966796875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1183098999958902</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1183098999958902</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5510</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5510</min_tcp_pkts><max_tcp_pkts>5510</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="100"><ip.session_id>52</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452317953109741</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831074097633587</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831074097633587</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="101"><ip.session_id>52</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452408075332642</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030040740966796875</time_between_pkts_sum><time_between_pkts_avg>0.030040740966796875</time_between_pkts_avg><time_between_pkts_max>0.030040740966796875</time_between_pkts_max><time_between_pkts_min>0.030040740966796875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830947951015076</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830947951015076</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1218</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1218</min_tcp_pkts><max_tcp_pkts>1218</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="102"><ip.session_id>53</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452317953109741</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831074097633587</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831074097633587</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="103"><ip.session_id>53</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.45241904258728</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830932600022875</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830932600022875</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>465</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>465</min_tcp_pkts><max_tcp_pkts>465</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="104"><ip.session_id>54</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452317953109741</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11831074097633587</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11831074097633587</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="105"><ip.session_id>54</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452440023422241</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830903233018362</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830903233018362</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4045</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4045</min_tcp_pkts><max_tcp_pkts>4045</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="106"><ip.session_id>55</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452446937561035</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1183089355528745</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1183089355528745</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="107"><ip.session_id>55</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452486038208008</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03910064697265625</time_between_pkts_sum><time_between_pkts_avg>0.03910064697265625</time_between_pkts_avg><time_between_pkts_max>0.03910064697265625</time_between_pkts_max><time_between_pkts_min>0.03910064697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830838826348511</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830838826348511</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8021</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8021</min_tcp_pkts><max_tcp_pkts>8021</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="108"><ip.session_id>56</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452495098114014</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830826145325157</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830826145325157</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="109"><ip.session_id>56</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452530145645142</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03504753112792969</time_between_pkts_sum><time_between_pkts_avg>0.03504753112792969</time_between_pkts_avg><time_between_pkts_max>0.03504753112792969</time_between_pkts_max><time_between_pkts_min>0.03504753112792969</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1183077709004343</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1183077709004343</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6025</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6025</min_tcp_pkts><max_tcp_pkts>6025</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="110"><ip.session_id>57</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452495098114014</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830826145325157</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830826145325157</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="111"><ip.session_id>57</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452553987503052</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02384185791015625</time_between_pkts_sum><time_between_pkts_avg>0.02384185791015625</time_between_pkts_avg><time_between_pkts_max>0.02384185791015625</time_between_pkts_max><time_between_pkts_min>0.02384185791015625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830743719335977</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830743719335977</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>999</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>999</min_tcp_pkts><max_tcp_pkts>999</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="112"><ip.session_id>58</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452495098114014</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830826145325157</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830826145325157</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="113"><ip.session_id>58</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.45258903503418</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03504753112792969</time_between_pkts_sum><time_between_pkts_avg>0.03504753112792969</time_between_pkts_avg><time_between_pkts_max>0.03504753112792969</time_between_pkts_max><time_between_pkts_min>0.03504753112792969</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830694664737788</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830694664737788</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7001</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7001</min_tcp_pkts><max_tcp_pkts>7001</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="114"><ip.session_id>59</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452599048614502</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830680649213024</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830680649213024</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="115"><ip.session_id>59</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452631950378418</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.031948089599609375</time_between_pkts_sum><time_between_pkts_avg>0.031948089599609375</time_between_pkts_avg><time_between_pkts_max>0.031948089599609375</time_between_pkts_max><time_between_pkts_min>0.031948089599609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1183063459843689</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1183063459843689</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1234</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1234</min_tcp_pkts><max_tcp_pkts>1234</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="116"><ip.session_id>60</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452600002288818</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830679314402873</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830679314402873</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="117"><ip.session_id>60</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452639102935791</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830624587446038</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830624587446038</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1088</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1088</min_tcp_pkts><max_tcp_pkts>1088</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="118"><ip.session_id>61</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452600002288818</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830679314402873</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830679314402873</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="119"><ip.session_id>61</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452646017074585</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830614910170988</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830614910170988</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8008</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8008</min_tcp_pkts><max_tcp_pkts>8008</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="120"><ip.session_id>62</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452600002288818</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830679314402873</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830679314402873</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="121"><ip.session_id>62</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452672958374023</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.026941299438476562</time_between_pkts_sum><time_between_pkts_avg>0.026941299438476562</time_between_pkts_avg><time_between_pkts_max>0.026941299438476562</time_between_pkts_max><time_between_pkts_min>0.026941299438476562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830577202319234</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830577202319234</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6565</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6565</min_tcp_pkts><max_tcp_pkts>6565</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="122"><ip.session_id>63</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452600002288818</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830679314402873</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830679314402873</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="123"><ip.session_id>63</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452696084976196</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.023126602172851562</time_between_pkts_sum><time_between_pkts_avg>0.023126602172851562</time_between_pkts_avg><time_between_pkts_max>0.023126602172851562</time_between_pkts_max><time_between_pkts_min>0.023126602172851562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830544833824061</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830544833824061</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2106</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2106</min_tcp_pkts><max_tcp_pkts>2106</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="124"><ip.session_id>64</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452718019485474</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02193450927734375</time_between_pkts_sum><time_between_pkts_avg>0.02193450927734375</time_between_pkts_avg><time_between_pkts_max>0.02193450927734375</time_between_pkts_max><time_between_pkts_min>0.02193450927734375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1183051413397168</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1183051413397168</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="125"><ip.session_id>64</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452758073806763</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0400543212890625</time_between_pkts_sum><time_between_pkts_avg>0.0400543212890625</time_between_pkts_avg><time_between_pkts_max>0.0400543212890625</time_between_pkts_max><time_between_pkts_min>0.0400543212890625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830458073782804</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830458073782804</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>49152</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>49152</min_tcp_pkts><max_tcp_pkts>49152</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="126"><ip.session_id>65</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452718019485474</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1183051413397168</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1183051413397168</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="127"><ip.session_id>65</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452765941619873</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1183044706202242</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1183044706202242</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5961</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5961</min_tcp_pkts><max_tcp_pkts>5961</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="128"><ip.session_id>66</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452718019485474</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1183051413397168</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1183051413397168</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="129"><ip.session_id>66</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452773094177246</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1183043705134895</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1183043705134895</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8383</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8383</min_tcp_pkts><max_tcp_pkts>8383</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="130"><ip.session_id>67</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452718019485474</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1183051413397168</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1183051413397168</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="131"><ip.session_id>67</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452779054641724</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830428709134</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830428709134</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7000</min_tcp_pkts><max_tcp_pkts>7000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="132"><ip.session_id>68</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452718019485474</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1183051413397168</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1183051413397168</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="133"><ip.session_id>68</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452785015106201</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830420366930815</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830420366930815</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>15660</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>15660</min_tcp_pkts><max_tcp_pkts>15660</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="134"><ip.session_id>69</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452794075012207</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830407686804506</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830407686804506</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="135"><ip.session_id>69</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.4528329372406</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03886222839355469</time_between_pkts_sum><time_between_pkts_avg>0.03886222839355469</time_between_pkts_avg><time_between_pkts_max>0.03886222839355469</time_between_pkts_max><time_between_pkts_min>0.03886222839355469</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830353296044754</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830353296044754</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1137</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1137</min_tcp_pkts><max_tcp_pkts>1137</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="136"><ip.session_id>70</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452794075012207</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830407686804506</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830407686804506</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="137"><ip.session_id>70</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452862977981567</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030040740966796875</time_between_pkts_sum><time_between_pkts_avg>0.030040740966796875</time_between_pkts_avg><time_between_pkts_max>0.030040740966796875</time_between_pkts_max><time_between_pkts_min>0.030040740966796875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830311251996502</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830311251996502</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5054</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5054</min_tcp_pkts><max_tcp_pkts>5054</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="138"><ip.session_id>71</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452794075012207</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830407686804506</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830407686804506</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="139"><ip.session_id>71</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452876091003418</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.013113021850585938</time_between_pkts_sum><time_between_pkts_avg>0.013113021850585938</time_between_pkts_avg><time_between_pkts_max>0.013113021850585938</time_between_pkts_max><time_between_pkts_min>0.013113021850585938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830292899529452</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830292899529452</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1719</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1719</min_tcp_pkts><max_tcp_pkts>1719</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="140"><ip.session_id>72</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452794075012207</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830407686804506</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830407686804506</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="141"><ip.session_id>72</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452884912490845</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830280553356382</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830280553356382</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32781</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32781</min_tcp_pkts><max_tcp_pkts>32781</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="142"><ip.session_id>73</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452794075012207</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830407686804506</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830407686804506</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="143"><ip.session_id>73</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452891111373901</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830271877682613</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830271877682613</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6510</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6510</min_tcp_pkts><max_tcp_pkts>6510</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="144"><ip.session_id>74</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452794075012207</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830407686804506</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830407686804506</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="145"><ip.session_id>74</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452924966812134</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.033855438232421875</time_between_pkts_sum><time_between_pkts_avg>0.033855438232421875</time_between_pkts_avg><time_between_pkts_max>0.033855438232421875</time_between_pkts_max><time_between_pkts_min>0.033855438232421875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830224495381174</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830224495381174</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1042</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1042</min_tcp_pkts><max_tcp_pkts>1042</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="146"><ip.session_id>75</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.45293402671814</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1183021181567474</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1183021181567474</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="147"><ip.session_id>75</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452945947647095</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.011920928955078125</time_between_pkts_max><time_between_pkts_min>0.011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830195131891898</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830195131891898</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7070</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7070</min_tcp_pkts><max_tcp_pkts>7070</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="148"><ip.session_id>76</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.45293402671814</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1183021181567474</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1183021181567474</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="149"><ip.session_id>76</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.452970027923584</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.024080276489257812</time_between_pkts_sum><time_between_pkts_avg>0.024080276489257812</time_between_pkts_avg><time_between_pkts_max>0.024080276489257812</time_between_pkts_max><time_between_pkts_min>0.024080276489257812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11830161430794087</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11830161430794087</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1074</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1074</min_tcp_pkts><max_tcp_pkts>1074</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="150"><ip.session_id>77</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.48730206489563</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>34.3320369720459</time_between_pkts_sum><time_between_pkts_avg>34.3320369720459</time_between_pkts_avg><time_between_pkts_max>34.3320369720459</time_between_pkts_max><time_between_pkts_min>34.3320369720459</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11782307173160535</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11782307173160535</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="151"><ip.session_id>77</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487329006195068</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.026941299438476562</time_between_pkts_sum><time_between_pkts_avg>0.026941299438476562</time_between_pkts_avg><time_between_pkts_max>0.026941299438476562</time_between_pkts_max><time_between_pkts_min>0.026941299438476562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11782269772623169</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11782269772623169</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2179</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2179</min_tcp_pkts><max_tcp_pkts>2179</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="152"><ip.session_id>78</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487415075302124</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.08606910705566406</time_between_pkts_sum><time_between_pkts_avg>0.08606910705566406</time_between_pkts_avg><time_between_pkts_max>0.08606910705566406</time_between_pkts_max><time_between_pkts_min>0.08606910705566406</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11782150291081449</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11782150291081449</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="153"><ip.session_id>78</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487425088882446</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11782136390339225</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11782136390339225</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1095</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1095</min_tcp_pkts><max_tcp_pkts>1095</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="154"><ip.session_id>79</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487564086914062</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.13899803161621094</time_between_pkts_sum><time_between_pkts_avg>0.13899803161621094</time_between_pkts_avg><time_between_pkts_max>0.13899803161621094</time_between_pkts_max><time_between_pkts_min>0.13899803161621094</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781943438185966</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781943438185966</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="155"><ip.session_id>79</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487589120864868</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025033950805664062</time_between_pkts_sum><time_between_pkts_avg>0.025033950805664062</time_between_pkts_avg><time_between_pkts_max>0.025033950805664062</time_between_pkts_max><time_between_pkts_min>0.025033950805664062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1178190868761213</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1178190868761213</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10001</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10001</min_tcp_pkts><max_tcp_pkts>10001</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="156"><ip.session_id>80</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487596035003662</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781899089870723</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781899089870723</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="157"><ip.session_id>80</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487637042999268</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04100799560546875</time_between_pkts_sum><time_between_pkts_avg>0.04100799560546875</time_between_pkts_avg><time_between_pkts_max>0.04100799560546875</time_between_pkts_max><time_between_pkts_min>0.04100799560546875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781842165656875</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781842165656875</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1096</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1096</min_tcp_pkts><max_tcp_pkts>1096</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="158"><ip.session_id>81</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487646102905273</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781829589451256</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781829589451256</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="159"><ip.session_id>81</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487653970718384</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781818668031319</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781818668031319</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5988</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5988</min_tcp_pkts><max_tcp_pkts>5988</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="160"><ip.session_id>82</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487646102905273</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781829589451256</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781829589451256</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="161"><ip.session_id>82</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487667083740234</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.013113021850585938</time_between_pkts_sum><time_between_pkts_avg>0.013113021850585938</time_between_pkts_avg><time_between_pkts_max>0.013113021850585938</time_between_pkts_max><time_between_pkts_min>0.013113021850585938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781800465709749</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781800465709749</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1999</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1999</min_tcp_pkts><max_tcp_pkts>1999</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="162"><ip.session_id>83</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487671136856079</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781794839549006</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781794839549006</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="163"><ip.session_id>83</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487695932388306</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0247955322265625</time_between_pkts_sum><time_between_pkts_avg>0.0247955322265625</time_between_pkts_avg><time_between_pkts_max>0.0247955322265625</time_between_pkts_max><time_between_pkts_min>0.0247955322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781760420800272</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781760420800272</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9415</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9415</min_tcp_pkts><max_tcp_pkts>9415</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="164"><ip.session_id>84</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487702131271362</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1178175181614451</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1178175181614451</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="165"><ip.session_id>84</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487723112106323</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781722692787498</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781722692787498</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9535</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9535</min_tcp_pkts><max_tcp_pkts>9535</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="166"><ip.session_id>85</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487730026245117</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781713095349117</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781713095349117</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="167"><ip.session_id>85</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487739086151123</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781700519419043</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781700519419043</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1011</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1011</min_tcp_pkts><max_tcp_pkts>1011</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="168"><ip.session_id>86</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487748146057129</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781687943515817</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781687943515817</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="169"><ip.session_id>86</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487774133682251</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781651870679198</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781651870679198</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1072</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1072</min_tcp_pkts><max_tcp_pkts>1072</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="170"><ip.session_id>87</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487780094146729</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781643597123959</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781643597123959</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="171"><ip.session_id>87</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487787961959839</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781632676048837</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781632676048837</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9050</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9050</min_tcp_pkts><max_tcp_pkts>9050</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="172"><ip.session_id>88</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487780094146729</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781643597123959</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781643597123959</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="173"><ip.session_id>88</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487818956375122</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.030994415283203125</time_between_pkts_max><time_between_pkts_min>0.030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1178158965382867</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1178158965382867</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2191</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2191</min_tcp_pkts><max_tcp_pkts>2191</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="174"><ip.session_id>89</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487828016281128</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781577078162121</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781577078162121</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="175"><ip.session_id>89</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487863063812256</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03504753112792969</time_between_pkts_sum><time_between_pkts_avg>0.03504753112792969</time_between_pkts_avg><time_between_pkts_max>0.03504753112792969</time_between_pkts_max><time_between_pkts_min>0.03504753112792969</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1178152843044169</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1178152843044169</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1053</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1053</min_tcp_pkts><max_tcp_pkts>1053</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="176"><ip.session_id>90</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487828016281128</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781577078162121</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781577078162121</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="177"><ip.session_id>90</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487870931625366</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781517509580075</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781517509580075</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1984</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1984</min_tcp_pkts><max_tcp_pkts>1984</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="178"><ip.session_id>91</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487893104553223</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.022172927856445312</time_between_pkts_sum><time_between_pkts_avg>0.022172927856445312</time_between_pkts_avg><time_between_pkts_max>0.022172927856445312</time_between_pkts_max><time_between_pkts_min>0.022172927856445312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781486732715363</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781486732715363</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="179"><ip.session_id>91</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487918138504028</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025033950805664062</time_between_pkts_sum><time_between_pkts_avg>0.025033950805664062</time_between_pkts_avg><time_between_pkts_max>0.025033950805664062</time_between_pkts_max><time_between_pkts_min>0.025033950805664062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781451984835556</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781451984835556</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9100</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9100</min_tcp_pkts><max_tcp_pkts>9100</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="180"><ip.session_id>92</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.48796010017395</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.041961669921875</time_between_pkts_sum><time_between_pkts_avg>0.041961669921875</time_between_pkts_avg><time_between_pkts_max>0.041961669921875</time_between_pkts_max><time_between_pkts_min>0.041961669921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781393741230077</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781393741230077</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="181"><ip.session_id>92</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.487982988357544</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02288818359375</time_between_pkts_sum><time_between_pkts_avg>0.02288818359375</time_between_pkts_avg><time_between_pkts_max>0.02288818359375</time_between_pkts_max><time_between_pkts_min>0.02288818359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11781361972233449</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11781361972233449</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5998</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5998</min_tcp_pkts><max_tcp_pkts>5998</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="182"><ip.session_id>93</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489027976989746</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>1.0449886322021484</time_between_pkts_sum><time_between_pkts_avg>1.0449886322021484</time_between_pkts_avg><time_between_pkts_max>1.0449886322021484</time_between_pkts_max><time_between_pkts_min>1.0449886322021484</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779911701440819</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779911701440819</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="183"><ip.session_id>93</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489037990570068</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779897805980329</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779897805980329</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1166</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1166</min_tcp_pkts><max_tcp_pkts>1166</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="184"><ip.session_id>94</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489071130752563</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03314018249511719</time_between_pkts_sum><time_between_pkts_avg>0.03314018249511719</time_between_pkts_avg><time_between_pkts_max>0.03314018249511719</time_between_pkts_max><time_between_pkts_min>0.03314018249511719</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177985181885676</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177985181885676</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="185"><ip.session_id>94</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489078044891357</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779842224466178</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779842224466178</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>13782</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>13782</min_tcp_pkts><max_tcp_pkts>13782</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="186"><ip.session_id>95</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489160060882568</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0820159912109375</time_between_pkts_sum><time_between_pkts_avg>0.0820159912109375</time_between_pkts_avg><time_between_pkts_max>0.0820159912109375</time_between_pkts_max><time_between_pkts_min>0.0820159912109375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779728416335643</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779728416335643</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="187"><ip.session_id>95</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489171981811523</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.011920928955078125</time_between_pkts_max><time_between_pkts_min>0.011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779711874639248</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779711874639248</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8088</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8088</min_tcp_pkts><max_tcp_pkts>8088</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="188"><ip.session_id>96</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489160060882568</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779728416335643</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779728416335643</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="189"><ip.session_id>96</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489197969436646</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779675813902139</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779675813902139</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5679</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5679</min_tcp_pkts><max_tcp_pkts>5679</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="190"><ip.session_id>97</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489207029342651</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177966324232092</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177966324232092</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="191"><ip.session_id>97</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.48921513557434</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779651994086784</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779651994086784</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1524</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1524</min_tcp_pkts><max_tcp_pkts>1524</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="192"><ip.session_id>98</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489252090454102</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03695487976074219</time_between_pkts_sum><time_between_pkts_avg>0.03695487976074219</time_between_pkts_avg><time_between_pkts_max>0.03695487976074219</time_between_pkts_max><time_between_pkts_min>0.03695487976074219</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779600715644535</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779600715644535</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="193"><ip.session_id>98</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489274978637695</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02288818359375</time_between_pkts_sum><time_between_pkts_avg>0.02288818359375</time_between_pkts_avg><time_between_pkts_max>0.02288818359375</time_between_pkts_max><time_between_pkts_min>0.02288818359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779568956317087</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779568956317087</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5633</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5633</min_tcp_pkts><max_tcp_pkts>5633</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="194"><ip.session_id>99</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489404916763306</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.12993812561035156</time_between_pkts_sum><time_between_pkts_avg>0.12993812561035156</time_between_pkts_avg><time_between_pkts_max>0.12993812561035156</time_between_pkts_max><time_between_pkts_min>0.12993812561035156</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779388659214324</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779388659214324</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="195"><ip.session_id>99</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489431142807007</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.026226043701171875</time_between_pkts_sum><time_between_pkts_avg>0.026226043701171875</time_between_pkts_avg><time_between_pkts_max>0.026226043701171875</time_between_pkts_max><time_between_pkts_min>0.026226043701171875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779352269642802</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779352269642802</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1052</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1052</min_tcp_pkts><max_tcp_pkts>1052</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="196"><ip.session_id>100</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489404916763306</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779388659214324</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779388659214324</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="197"><ip.session_id>100</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489452123641968</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779323158147464</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779323158147464</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>15004</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>15004</min_tcp_pkts><max_tcp_pkts>15004</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="198"><ip.session_id>101</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489404916763306</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779388659214324</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779388659214324</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="199"><ip.session_id>101</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489463090896606</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779307940832168</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779307940832168</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6901</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6901</min_tcp_pkts><max_tcp_pkts>6901</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="200"><ip.session_id>102</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489468097686768</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779300993809996</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779300993809996</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="201"><ip.session_id>102</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489475965499878</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779290077077424</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779290077077424</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4002</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4002</min_tcp_pkts><max_tcp_pkts>4002</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="202"><ip.session_id>103</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489525079727173</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.049114227294921875</time_between_pkts_sum><time_between_pkts_avg>0.049114227294921875</time_between_pkts_avg><time_between_pkts_max>0.049114227294921875</time_between_pkts_max><time_between_pkts_min>0.049114227294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779221930658774</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779221930658774</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="203"><ip.session_id>103</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489547967910767</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02288818359375</time_between_pkts_sum><time_between_pkts_avg>0.02288818359375</time_between_pkts_avg><time_between_pkts_max>0.02288818359375</time_between_pkts_max><time_between_pkts_min>0.02288818359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779190173373798</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779190173373798</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>255</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>255</min_tcp_pkts><max_tcp_pkts>255</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="204"><ip.session_id>104</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489557981491089</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779176279615468</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779176279615468</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="205"><ip.session_id>104</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489568948745728</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779161062679663</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779161062679663</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1080</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1080</min_tcp_pkts><max_tcp_pkts>1080</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="206"><ip.session_id>105</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489557981491089</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779176279615468</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779176279615468</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="207"><ip.session_id>105</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489589929580688</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779131952129415</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779131952129415</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>787</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>787</min_tcp_pkts><max_tcp_pkts>787</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="208"><ip.session_id>106</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489596128463745</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779123351312559</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779123351312559</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="209"><ip.session_id>106</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489623069763184</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177908597098522</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177908597098522</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2394</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2394</min_tcp_pkts><max_tcp_pkts>2394</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="210"><ip.session_id>107</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489597082138062</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779122028111082</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779122028111082</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="211"><ip.session_id>107</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.48963212966919</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779073400662962</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779073400662962</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>617</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>617</min_tcp_pkts><max_tcp_pkts>617</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="212"><ip.session_id>108</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489649057388306</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.016927719116210938</time_between_pkts_sum><time_between_pkts_avg>0.016927719116210938</time_between_pkts_avg><time_between_pkts_max>0.016927719116210938</time_between_pkts_max><time_between_pkts_min>0.016927719116210938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779049914080109</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779049914080109</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="213"><ip.session_id>108</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489670038223267</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779020804079234</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779020804079234</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1111</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1111</min_tcp_pkts><max_tcp_pkts>1111</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="214"><ip.session_id>109</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489678144454956</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779009557071975</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779009557071975</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="215"><ip.session_id>109</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489690065383911</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.011920928955078125</time_between_pkts_max><time_between_pkts_min>0.011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778993017394436</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778993017394436</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32784</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32784</min_tcp_pkts><max_tcp_pkts>32784</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="216"><ip.session_id>110</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489678144454956</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779009557071975</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779009557071975</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="217"><ip.session_id>110</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489697933197021</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778982101232705</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778982101232705</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1030</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1030</min_tcp_pkts><max_tcp_pkts>1030</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="218"><ip.session_id>111</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489678144454956</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779009557071975</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779009557071975</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="219"><ip.session_id>111</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489706993103027</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778969531132139</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778969531132139</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7002</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7002</min_tcp_pkts><max_tcp_pkts>7002</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="220"><ip.session_id>112</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489678144454956</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11779009557071975</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11779009557071975</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="221"><ip.session_id>112</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489715099334717</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778958284222793</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778958284222793</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>16000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>16000</min_tcp_pkts><max_tcp_pkts>16000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="222"><ip.session_id>113</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489725112915039</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778944391011491</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778944391011491</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="223"><ip.session_id>113</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.48976993560791</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04482269287109375</time_between_pkts_sum><time_between_pkts_avg>0.04482269287109375</time_between_pkts_avg><time_between_pkts_max>0.04482269287109375</time_between_pkts_max><time_between_pkts_min>0.04482269287109375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778882202753059</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778882202753059</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>49</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>49</min_tcp_pkts><max_tcp_pkts>49</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="224"><ip.session_id>114</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489725112915039</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778944391011491</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778944391011491</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="225"><ip.session_id>114</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.4897780418396</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778870956010482</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778870956010482</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8085</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8085</min_tcp_pkts><max_tcp_pkts>8085</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="226"><ip.session_id>115</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489725112915039</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778944391011491</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778944391011491</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="227"><ip.session_id>115</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.48978590965271</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177886004007499</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177886004007499</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6004</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6004</min_tcp_pkts><max_tcp_pkts>6004</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="228"><ip.session_id>116</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489725112915039</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778944391011491</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778944391011491</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="229"><ip.session_id>116</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489789962768555</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778854416722177</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778854416722177</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8652</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8652</min_tcp_pkts><max_tcp_pkts>8652</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="230"><ip.session_id>117</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489794969558716</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177884747023494</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177884747023494</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="231"><ip.session_id>117</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489820957183838</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778811414789958</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778811414789958</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>25735</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>25735</min_tcp_pkts><max_tcp_pkts>25735</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="232"><ip.session_id>118</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489794969558716</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177884747023494</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177884747023494</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="233"><ip.session_id>118</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489845037460327</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.024080276489257812</time_between_pkts_sum><time_between_pkts_avg>0.024080276489257812</time_between_pkts_avg><time_between_pkts_max>0.024080276489257812</time_between_pkts_max><time_between_pkts_min>0.024080276489257812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778778005813195</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778778005813195</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2103</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2103</min_tcp_pkts><max_tcp_pkts>2103</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="234"><ip.session_id>119</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489794969558716</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177884747023494</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177884747023494</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="235"><ip.session_id>119</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489885091781616</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0400543212890625</time_between_pkts_sum><time_between_pkts_avg>0.0400543212890625</time_between_pkts_avg><time_between_pkts_max>0.0400543212890625</time_between_pkts_max><time_between_pkts_min>0.0400543212890625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778722434865704</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778722434865704</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10012</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10012</min_tcp_pkts><max_tcp_pkts>10012</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="236"><ip.session_id>120</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.48989200592041</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778712842314742</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778712842314742</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="237"><ip.session_id>120</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.489928960800171</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03695487976074219</time_between_pkts_sum><time_between_pkts_avg>0.03695487976074219</time_between_pkts_avg><time_between_pkts_max>0.03695487976074219</time_between_pkts_max><time_between_pkts_min>0.03695487976074219</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778661572048661</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778661572048661</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1050</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1050</min_tcp_pkts><max_tcp_pkts>1050</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="238"><ip.session_id>121</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490145921707153</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.21696090698242188</time_between_pkts_sum><time_between_pkts_avg>0.21696090698242188</time_between_pkts_avg><time_between_pkts_max>0.21696090698242188</time_between_pkts_max><time_between_pkts_min>0.21696090698242188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778360574972607</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778360574972607</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="239"><ip.session_id>121</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490158081054688</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.012159347534179688</time_between_pkts_sum><time_between_pkts_avg>0.012159347534179688</time_between_pkts_avg><time_between_pkts_max>0.012159347534179688</time_between_pkts_max><time_between_pkts_min>0.012159347534179688</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778343706360946</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778343706360946</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1113</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1113</min_tcp_pkts><max_tcp_pkts>1113</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="240"><ip.session_id>122</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490164041519165</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778335437451308</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778335437451308</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="241"><ip.session_id>122</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.49016809463501</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778329814599386</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778329814599386</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10629</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10629</min_tcp_pkts><max_tcp_pkts>10629</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="242"><ip.session_id>123</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.49020004272461</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.031948089599609375</time_between_pkts_sum><time_between_pkts_avg>0.031948089599609375</time_between_pkts_avg><time_between_pkts_max>0.031948089599609375</time_between_pkts_max><time_between_pkts_min>0.031948089599609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177828549348394</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177828549348394</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="243"><ip.session_id>123</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.49020791053772</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778274578633563</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778274578633563</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1084</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1084</min_tcp_pkts><max_tcp_pkts>1084</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="244"><ip.session_id>124</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.49021291732788</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778267632830218</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778267632830218</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="245"><ip.session_id>124</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490216970443726</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778262010043035</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778262010043035</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7103</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7103</min_tcp_pkts><max_tcp_pkts>7103</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="246"><ip.session_id>125</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490237951278687</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778232903936377</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778232903936377</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="247"><ip.session_id>125</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490265130996704</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.027179718017578125</time_between_pkts_sum><time_between_pkts_avg>0.027179718017578125</time_between_pkts_avg><time_between_pkts_max>0.027179718017578125</time_between_pkts_max><time_between_pkts_min>0.027179718017578125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177819519851209</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177819519851209</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>51103</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>51103</min_tcp_pkts><max_tcp_pkts>51103</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="248"><ip.session_id>126</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490271091461182</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778186929810969</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778186929810969</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="249"><ip.session_id>126</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490278959274292</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778176015143267</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778176015143267</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>52673</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>52673</min_tcp_pkts><max_tcp_pkts>52673</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="250"><ip.session_id>127</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490271091461182</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778186929810969</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778186929810969</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="251"><ip.session_id>127</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490294933319092</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015974044799804688</time_between_pkts_sum><time_between_pkts_avg>0.015974044799804688</time_between_pkts_avg><time_between_pkts_max>0.015974044799804688</time_between_pkts_max><time_between_pkts_min>0.015974044799804688</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778153855122583</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778153855122583</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1057</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1057</min_tcp_pkts><max_tcp_pkts>1057</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="252"><ip.session_id>128</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490302085876465</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177814393275229</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177814393275229</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="253"><ip.session_id>128</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490313053131104</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778128718483644</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778128718483644</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5730</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5730</min_tcp_pkts><max_tcp_pkts>5730</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="254"><ip.session_id>129</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490302085876465</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177814393275229</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177814393275229</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="255"><ip.session_id>129</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490320920944214</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778117803923828</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778117803923828</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>280</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>280</min_tcp_pkts><max_tcp_pkts>280</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="256"><ip.session_id>130</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490324974060059</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778112181279697</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778112181279697</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="257"><ip.session_id>130</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.49032998085022</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778105235667886</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778105235667886</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>33354</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>33354</min_tcp_pkts><max_tcp_pkts>33354</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="258"><ip.session_id>131</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490365982055664</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03600120544433594</time_between_pkts_sum><time_between_pkts_avg>0.03600120544433594</time_between_pkts_avg><time_between_pkts_max>0.03600120544433594</time_between_pkts_max><time_between_pkts_min>0.03600120544433594</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778055293652756</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778055293652756</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="259"><ip.session_id>131</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490376949310303</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778040079613106</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778040079613106</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6543</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6543</min_tcp_pkts><max_tcp_pkts>6543</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="260"><ip.session_id>132</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.49040412902832</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.027179718017578125</time_between_pkts_sum><time_between_pkts_avg>0.027179718017578125</time_between_pkts_avg><time_between_pkts_max>0.027179718017578125</time_between_pkts_max><time_between_pkts_min>0.027179718017578125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11778002375423377</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11778002375423377</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="261"><ip.session_id>132</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490427017211914</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02288818359375</time_between_pkts_sum><time_between_pkts_avg>0.02288818359375</time_between_pkts_avg><time_between_pkts_max>0.02288818359375</time_between_pkts_max><time_between_pkts_min>0.02288818359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777970624713996</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777970624713996</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>625</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>625</min_tcp_pkts><max_tcp_pkts>625</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="262"><ip.session_id>133</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490432977676392</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177796235632819</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177796235632819</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="263"><ip.session_id>133</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.49043893814087</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777954087953992</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777954087953992</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1067</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1067</min_tcp_pkts><max_tcp_pkts>1067</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="264"><ip.session_id>134</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490469932556152</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.030994415283203125</time_between_pkts_max><time_between_pkts_min>0.030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777911092595303</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777911092595303</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="265"><ip.session_id>134</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490477085113525</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777901170634031</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777901170634031</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1027</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1027</min_tcp_pkts><max_tcp_pkts>1027</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="266"><ip.session_id>135</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.49048113822937</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777895548196729</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777895548196729</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="267"><ip.session_id>135</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490486145019531</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777888602840417</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777888602840417</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>16012</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>16012</min_tcp_pkts><max_tcp_pkts>16012</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="268"><ip.session_id>136</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490500926971436</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014781951904296875</time_between_pkts_sum><time_between_pkts_avg>0.014781951904296875</time_between_pkts_avg><time_between_pkts_max>0.014781951904296875</time_between_pkts_max><time_between_pkts_min>0.014781951904296875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777868097550521</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777868097550521</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="269"><ip.session_id>136</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.49051308631897</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.012159347534179688</time_between_pkts_sum><time_between_pkts_avg>0.012159347534179688</time_between_pkts_avg><time_between_pkts_max>0.012159347534179688</time_between_pkts_max><time_between_pkts_min>0.012159347534179688</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777851230349452</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777851230349452</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3905</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3905</min_tcp_pkts><max_tcp_pkts>3905</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="270"><ip.session_id>137</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490519046783447</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177784296213128</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177784296213128</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="271"><ip.session_id>137</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490524053573608</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777836016836984</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777836016836984</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1054</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1054</min_tcp_pkts><max_tcp_pkts>1054</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="272"><ip.session_id>138</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490560054779053</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03600120544433594</time_between_pkts_sum><time_between_pkts_avg>0.03600120544433594</time_between_pkts_avg><time_between_pkts_max>0.03600120544433594</time_between_pkts_max><time_between_pkts_min>0.03600120544433594</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177778607710493</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177778607710493</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="273"><ip.session_id>138</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490565061569214</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777779131877725</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777779131877725</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8290</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8290</min_tcp_pkts><max_tcp_pkts>8290</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="274"><ip.session_id>139</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490577936172485</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.012874603271484375</time_between_pkts_sum><time_between_pkts_avg>0.012874603271484375</time_between_pkts_avg><time_between_pkts_max>0.012874603271484375</time_between_pkts_max><time_between_pkts_min>0.012874603271484375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777761272759667</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777761272759667</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="275"><ip.session_id>139</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490602970123291</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025033950805664062</time_between_pkts_sum><time_between_pkts_avg>0.025033950805664062</time_between_pkts_avg><time_between_pkts_max>0.025033950805664062</time_between_pkts_max><time_between_pkts_min>0.025033950805664062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177772654685182</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177772654685182</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5859</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5859</min_tcp_pkts><max_tcp_pkts>5859</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="276"><ip.session_id>140</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490610122680664</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777716625201476</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777716625201476</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="277"><ip.session_id>140</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.49061894416809</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777704388522406</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777704388522406</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3914</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3914</min_tcp_pkts><max_tcp_pkts>3914</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="278"><ip.session_id>141</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490646123886108</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.027179718017578125</time_between_pkts_sum><time_between_pkts_avg>0.027179718017578125</time_between_pkts_avg><time_between_pkts_max>0.027179718017578125</time_between_pkts_max><time_between_pkts_min>0.027179718017578125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177766668648189</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177766668648189</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="279"><ip.session_id>141</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490654945373535</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777654449906588</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777654449906588</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5999</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5999</min_tcp_pkts><max_tcp_pkts>5999</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="280"><ip.session_id>142</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490698099136353</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04315376281738281</time_between_pkts_sum><time_between_pkts_avg>0.04315376281738281</time_between_pkts_avg><time_between_pkts_max>0.04315376281738281</time_between_pkts_max><time_between_pkts_min>0.04315376281738281</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177759459026952</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177759459026952</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="281"><ip.session_id>142</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490724086761475</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777558542494333</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777558542494333</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>427</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>427</min_tcp_pkts><max_tcp_pkts>427</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="282"><ip.session_id>143</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490698099136353</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177759459026952</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177759459026952</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="283"><ip.session_id>143</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490746974945068</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02288818359375</time_between_pkts_sum><time_between_pkts_avg>0.02288818359375</time_between_pkts_avg><time_between_pkts_max>0.02288818359375</time_between_pkts_max><time_between_pkts_min>0.02288818359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777526794177842</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777526794177842</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6112</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6112</min_tcp_pkts><max_tcp_pkts>6112</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="284"><ip.session_id>144</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490756034851074</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777514227183183</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777514227183183</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="285"><ip.session_id>144</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490787982940674</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.031948089599609375</time_between_pkts_sum><time_between_pkts_avg>0.031948089599609375</time_between_pkts_avg><time_between_pkts_max>0.031948089599609375</time_between_pkts_max><time_between_pkts_min>0.031948089599609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777469912205522</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777469912205522</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>179</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>179</min_tcp_pkts><max_tcp_pkts>179</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="286"><ip.session_id>145</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490756034851074</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777514227183183</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777514227183183</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="287"><ip.session_id>145</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490808010101318</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02002716064453125</time_between_pkts_sum><time_between_pkts_avg>0.02002716064453125</time_between_pkts_avg><time_between_pkts_max>0.02002716064453125</time_between_pkts_max><time_between_pkts_min>0.02002716064453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777442132837335</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777442132837335</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7100</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7100</min_tcp_pkts><max_tcp_pkts>7100</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="288"><ip.session_id>146</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490816116333008</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177743088884461</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177743088884461</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="289"><ip.session_id>146</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490828037261963</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.011920928955078125</time_between_pkts_max><time_between_pkts_min>0.011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777414353600194</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777414353600194</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1163</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1163</min_tcp_pkts><max_tcp_pkts>1163</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="290"><ip.session_id>147</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490816116333008</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177743088884461</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177743088884461</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="291"><ip.session_id>147</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490837097167969</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777401786845489</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777401786845489</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>34573</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>34573</min_tcp_pkts><max_tcp_pkts>34573</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="292"><ip.session_id>148</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490947961807251</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.11086463928222656</time_between_pkts_sum><time_between_pkts_avg>0.11086463928222656</time_between_pkts_avg><time_between_pkts_max>0.11086463928222656</time_between_pkts_max><time_between_pkts_min>0.11086463928222656</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777248011624318</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777248011624318</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="293"><ip.session_id>148</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490957975387573</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777234122447233</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777234122447233</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>37</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>37</min_tcp_pkts><max_tcp_pkts>37</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="294"><ip.session_id>149</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490965127944946</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777224201626516</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777224201626516</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="295"><ip.session_id>149</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.490972995758057</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177721328874303</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177721328874303</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>64623</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>64623</min_tcp_pkts><max_tcp_pkts>64623</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="296"><ip.session_id>150</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.491008043289185</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03504753112792969</time_between_pkts_sum><time_between_pkts_avg>0.03504753112792969</time_between_pkts_avg><time_between_pkts_max>0.03504753112792969</time_between_pkts_max><time_between_pkts_min>0.03504753112792969</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.117771646770532</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.117771646770532</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="297"><ip.session_id>150</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.49101710319519</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777152110831311</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777152110831311</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2100</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2100</min_tcp_pkts><max_tcp_pkts>2100</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="298"><ip.session_id>151</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.491022109985352</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11777145166351771</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11777145166351771</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="299"><ip.session_id>151</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.491027116775513</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1177713822188042</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1177713822188042</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6699</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6699</min_tcp_pkts><max_tcp_pkts>6699</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="300"><ip.session_id>152</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.523575067520142</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>32.547950744628906</time_between_pkts_sum><time_between_pkts_avg>32.547950744628906</time_between_pkts_avg><time_between_pkts_max>32.547950744628906</time_between_pkts_max><time_between_pkts_min>32.547950744628906</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11732166280914108</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11732166280914108</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="301"><ip.session_id>152</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.523620128631592</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04506111145019531</time_between_pkts_sum><time_between_pkts_avg>0.04506111145019531</time_between_pkts_avg><time_between_pkts_max>0.04506111145019531</time_between_pkts_max><time_between_pkts_min>0.04506111145019531</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11732104257449388</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11732104257449388</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6059</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6059</min_tcp_pkts><max_tcp_pkts>6059</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="302"><ip.session_id>153</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524119138717651</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.4990100860595703</time_between_pkts_sum><time_between_pkts_avg>0.4990100860595703</time_between_pkts_avg><time_between_pkts_max>0.4990100860595703</time_between_pkts_max><time_between_pkts_min>0.4990100860595703</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11731417448846658</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11731417448846658</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="303"><ip.session_id>153</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524128913879395</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009775161743164062</time_between_pkts_sum><time_between_pkts_avg>0.009775161743164062</time_between_pkts_avg><time_between_pkts_max>0.009775161743164062</time_between_pkts_max><time_between_pkts_min>0.009775161743164062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11731403995682799</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11731403995682799</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>81</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>81</min_tcp_pkts><max_tcp_pkts>81</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="304"><ip.session_id>154</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524188041687012</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0591278076171875</time_between_pkts_sum><time_between_pkts_avg>0.0591278076171875</time_between_pkts_avg><time_between_pkts_max>0.0591278076171875</time_between_pkts_max><time_between_pkts_min>0.0591278076171875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1173132262110552</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1173132262110552</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="305"><ip.session_id>154</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524218082427979</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030040740966796875</time_between_pkts_sum><time_between_pkts_avg>0.030040740966796875</time_between_pkts_avg><time_between_pkts_max>0.030040740966796875</time_between_pkts_max><time_between_pkts_min>0.030040740966796875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11731281278002768</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11731281278002768</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>777</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>777</min_tcp_pkts><max_tcp_pkts>777</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="306"><ip.session_id>155</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524415016174316</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.19693374633789062</time_between_pkts_sum><time_between_pkts_avg>0.19693374633789062</time_between_pkts_avg><time_between_pkts_max>0.19693374633789062</time_between_pkts_max><time_between_pkts_min>0.19693374633789062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11731010258212314</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11731010258212314</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="307"><ip.session_id>155</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524449110031128</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03409385681152344</time_between_pkts_sum><time_between_pkts_avg>0.03409385681152344</time_between_pkts_avg><time_between_pkts_max>0.03409385681152344</time_between_pkts_max><time_between_pkts_min>0.03409385681152344</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730963339592843</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730963339592843</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9011</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9011</min_tcp_pkts><max_tcp_pkts>9011</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="308"><ip.session_id>156</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52445912361145</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730949559370314</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730949559370314</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="309"><ip.session_id>156</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524471998214722</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.011920928955078125</time_between_pkts_max><time_between_pkts_min>0.011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1173093184198892</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1173093184198892</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2121</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2121</min_tcp_pkts><max_tcp_pkts>2121</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="310"><ip.session_id>157</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524460077285767</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730948246969858</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730948246969858</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="311"><ip.session_id>157</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524485111236572</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.013113021850585938</time_between_pkts_sum><time_between_pkts_avg>0.013113021850585938</time_between_pkts_avg><time_between_pkts_max>0.013113021850585938</time_between_pkts_max><time_between_pkts_min>0.013113021850585938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730913796562885</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730913796562885</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10617</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10617</min_tcp_pkts><max_tcp_pkts>10617</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="312"><ip.session_id>158</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524460077285767</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730948246969858</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730948246969858</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="313"><ip.session_id>158</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524513006210327</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.027894973754882812</time_between_pkts_sum><time_between_pkts_avg>0.027894973754882812</time_between_pkts_avg><time_between_pkts_max>0.027894973754882812</time_between_pkts_max><time_between_pkts_min>0.027894973754882812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730875409204893</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730875409204893</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3261</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3261</min_tcp_pkts><max_tcp_pkts>3261</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="314"><ip.session_id>159</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52452301979065</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730861629188945</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730861629188945</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="315"><ip.session_id>159</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524557113647461</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03409385681152344</time_between_pkts_sum><time_between_pkts_avg>0.03409385681152344</time_between_pkts_avg><time_between_pkts_max>0.03409385681152344</time_between_pkts_max><time_between_pkts_min>0.03409385681152344</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730814711758358</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730814711758358</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1112</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1112</min_tcp_pkts><max_tcp_pkts>1112</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="316"><ip.session_id>160</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52452301979065</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730861629188945</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730861629188945</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="317"><ip.session_id>160</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524582147598267</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025033950805664062</time_between_pkts_sum><time_between_pkts_avg>0.025033950805664062</time_between_pkts_avg><time_between_pkts_max>0.025033950805664062</time_between_pkts_max><time_between_pkts_min>0.025033950805664062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730780262135689</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730780262135689</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1071</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1071</min_tcp_pkts><max_tcp_pkts>1071</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="318"><ip.session_id>161</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52452301979065</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730861629188945</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730861629188945</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="319"><ip.session_id>161</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524590015411377</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730769435153209</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730769435153209</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8200</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8200</min_tcp_pkts><max_tcp_pkts>8200</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="320"><ip.session_id>162</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52452301979065</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730861629188945</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730861629188945</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="321"><ip.session_id>162</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524615049362183</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025033950805664062</time_between_pkts_sum><time_between_pkts_avg>0.025033950805664062</time_between_pkts_avg><time_between_pkts_max>0.025033950805664062</time_between_pkts_max><time_between_pkts_min>0.025033950805664062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730734985796464</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730734985796464</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1022</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1022</min_tcp_pkts><max_tcp_pkts>1022</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="322"><ip.session_id>163</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52452301979065</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730861629188945</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730861629188945</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="323"><ip.session_id>163</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524626970291138</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.011920928955078125</time_between_pkts_max><time_between_pkts_min>0.011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730718581411985</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730718581411985</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2251</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2251</min_tcp_pkts><max_tcp_pkts>2251</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="324"><ip.session_id>164</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52452301979065</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730861629188945</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730861629188945</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="325"><ip.session_id>164</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524647951126099</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730689709806735</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730689709806735</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4321</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4321</min_tcp_pkts><max_tcp_pkts>4321</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="326"><ip.session_id>165</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524665117263794</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0171661376953125</time_between_pkts_sum><time_between_pkts_avg>0.0171661376953125</time_between_pkts_avg><time_between_pkts_max>0.0171661376953125</time_between_pkts_max><time_between_pkts_min>0.0171661376953125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730666087689967</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730666087689967</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="327"><ip.session_id>165</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524676084518433</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730650995831837</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730650995831837</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1059</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1059</min_tcp_pkts><max_tcp_pkts>1059</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="328"><ip.session_id>166</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524665117263794</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730666087689967</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730666087689967</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="329"><ip.session_id>166</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524696111679077</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02002716064453125</time_between_pkts_sum><time_between_pkts_avg>0.02002716064453125</time_between_pkts_avg><time_between_pkts_max>0.02002716064453125</time_between_pkts_max><time_between_pkts_min>0.02002716064453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730623436886758</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730623436886758</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1247</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1247</min_tcp_pkts><max_tcp_pkts>1247</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="330"><ip.session_id>167</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524665117263794</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730666087689967</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730666087689967</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="331"><ip.session_id>167</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.524708032608032</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.011920928955078125</time_between_pkts_max><time_between_pkts_min>0.011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11730607032814261</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11730607032814261</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10025</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10025</min_tcp_pkts><max_tcp_pkts>10025</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="332"><ip.session_id>168</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525429964065552</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.7219314575195312</time_between_pkts_sum><time_between_pkts_avg>0.7219314575195312</time_between_pkts_avg><time_between_pkts_max>0.7219314575195312</time_between_pkts_max><time_between_pkts_min>0.7219314575195312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729613687696362</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729613687696362</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="333"><ip.session_id>168</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525437116622925</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729603846941722</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729603846941722</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>79</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>79</min_tcp_pkts><max_tcp_pkts>79</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="334"><ip.session_id>169</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525443077087402</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729595646325469</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729595646325469</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="335"><ip.session_id>169</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525448083877563</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729588757816677</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729588757816677</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2718</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2718</min_tcp_pkts><max_tcp_pkts>2718</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="336"><ip.session_id>170</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525535106658936</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.08702278137207031</time_between_pkts_sum><time_between_pkts_avg>0.08702278137207031</time_between_pkts_avg><time_between_pkts_max>0.08702278137207031</time_between_pkts_max><time_between_pkts_min>0.08702278137207031</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729469030265821</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729469030265821</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="337"><ip.session_id>170</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525548934936523</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.013828277587890625</time_between_pkts_sum><time_between_pkts_avg>0.013828277587890625</time_between_pkts_avg><time_between_pkts_max>0.013828277587890625</time_between_pkts_max><time_between_pkts_min>0.013828277587890625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729450005291013</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729450005291013</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>464</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>464</min_tcp_pkts><max_tcp_pkts>464</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="338"><ip.session_id>171</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525535106658936</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729469030265821</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729469030265821</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="339"><ip.session_id>171</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525569915771484</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1172942113992985</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1172942113992985</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>58080</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>58080</min_tcp_pkts><max_tcp_pkts>58080</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="340"><ip.session_id>172</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525535106658936</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729469030265821</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729469030265821</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="341"><ip.session_id>172</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52557897567749</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729408675385995</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729408675385995</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5004</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5004</min_tcp_pkts><max_tcp_pkts>5004</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="342"><ip.session_id>173</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52558708190918</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729397522921843</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729397522921843</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="343"><ip.session_id>173</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52559494972229</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729386698491624</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729386698491624</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>26214</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>26214</min_tcp_pkts><max_tcp_pkts>26214</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="344"><ip.session_id>174</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52558708190918</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729397522921843</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729397522921843</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="345"><ip.session_id>174</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525604009628296</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1172937423402097</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1172937423402097</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>513</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>513</min_tcp_pkts><max_tcp_pkts>513</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="346"><ip.session_id>175</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525609016418457</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729367345772236</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729367345772236</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="347"><ip.session_id>175</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52561902999878</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1172935356929904</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1172935356929904</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1051</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1051</min_tcp_pkts><max_tcp_pkts>1051</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="348"><ip.session_id>176</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525638103485107</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.019073486328125</time_between_pkts_sum><time_between_pkts_avg>0.019073486328125</time_between_pkts_avg><time_between_pkts_max>0.019073486328125</time_between_pkts_max><time_between_pkts_min>0.019073486328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1172932732848724</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1172932732848724</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="349"><ip.session_id>176</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525650978088379</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.012874603271484375</time_between_pkts_sum><time_between_pkts_avg>0.012874603271484375</time_between_pkts_avg><time_between_pkts_max>0.012874603271484375</time_between_pkts_max><time_between_pkts_min>0.012874603271484375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729309616005651</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729309616005651</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>524</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>524</min_tcp_pkts><max_tcp_pkts>524</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="350"><ip.session_id>177</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525638103485107</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1172932732848724</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1172932732848724</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="351"><ip.session_id>177</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525660037994385</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729297151698821</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729297151698821</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32777</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32777</min_tcp_pkts><max_tcp_pkts>32777</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="352"><ip.session_id>178</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525638103485107</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1172932732848724</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1172932732848724</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="353"><ip.session_id>178</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525665998458862</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729288951511407</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729288951511407</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6666</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6666</min_tcp_pkts><max_tcp_pkts>6666</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="354"><ip.session_id>179</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52566909790039</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729284687418483</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729284687418483</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="355"><ip.session_id>179</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52568006515503</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729269599114568</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729269599114568</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5907</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5907</min_tcp_pkts><max_tcp_pkts>5907</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="356"><ip.session_id>180</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52566909790039</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729284687418483</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729284687418483</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="357"><ip.session_id>180</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525686025619507</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729261398965679</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729261398965679</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>30718</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>30718</min_tcp_pkts><max_tcp_pkts>30718</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="358"><ip.session_id>181</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52566909790039</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729284687418483</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729284687418483</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="359"><ip.session_id>181</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525691986083984</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729253198828256</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729253198828256</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1007</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1007</min_tcp_pkts><max_tcp_pkts>1007</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="360"><ip.session_id>182</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525718927383423</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.026941299438476562</time_between_pkts_sum><time_between_pkts_avg>0.026941299438476562</time_between_pkts_avg><time_between_pkts_max>0.026941299438476562</time_between_pkts_max><time_between_pkts_min>0.026941299438476562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729216134350139</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729216134350139</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="361"><ip.session_id>182</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52574610710144</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.027179718017578125</time_between_pkts_sum><time_between_pkts_avg>0.027179718017578125</time_between_pkts_avg><time_between_pkts_max>0.027179718017578125</time_between_pkts_max><time_between_pkts_min>0.027179718017578125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729178742105155</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729178742105155</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9</min_tcp_pkts><max_tcp_pkts>9</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="362"><ip.session_id>183</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525718927383423</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729216134350139</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729216134350139</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="363"><ip.session_id>183</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525753021240234</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729169230080873</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729169230080873</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8654</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8654</min_tcp_pkts><max_tcp_pkts>8654</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="364"><ip.session_id>184</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525758028030396</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729162342072921</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729162342072921</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="365"><ip.session_id>184</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525763034820557</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729155454073058</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729155454073058</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2170</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2170</min_tcp_pkts><max_tcp_pkts>2170</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="366"><ip.session_id>185</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525787115097046</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.024080276489257812</time_between_pkts_sum><time_between_pkts_avg>0.024080276489257812</time_between_pkts_avg><time_between_pkts_max>0.024080276489257812</time_between_pkts_max><time_between_pkts_min>0.024080276489257812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1172912232618674</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1172912232618674</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="367"><ip.session_id>185</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525808095932007</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729093462438343</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729093462438343</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>458</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>458</min_tcp_pkts><max_tcp_pkts>458</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="368"><ip.session_id>186</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525818109512329</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729079686608507</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729079686608507</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="369"><ip.session_id>186</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52582597732544</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729068862764908</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729068862764908</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1034</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1034</min_tcp_pkts><max_tcp_pkts>1034</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="370"><ip.session_id>187</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525818109512329</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729079686608507</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729079686608507</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="371"><ip.session_id>187</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525861024856567</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03504753112792969</time_between_pkts_sum><time_between_pkts_avg>0.03504753112792969</time_between_pkts_avg><time_between_pkts_max>0.03504753112792969</time_between_pkts_max><time_between_pkts_min>0.03504753112792969</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729020647704297</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729020647704297</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2111</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2111</min_tcp_pkts><max_tcp_pkts>2111</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="372"><ip.session_id>188</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525867938995361</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729011135936433</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729011135936433</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="373"><ip.session_id>188</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525896072387695</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.028133392333984375</time_between_pkts_sum><time_between_pkts_avg>0.028133392333984375</time_between_pkts_avg><time_between_pkts_max>0.028133392333984375</time_between_pkts_max><time_between_pkts_min>0.028133392333984375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728972433040084</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728972433040084</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32773</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32773</min_tcp_pkts><max_tcp_pkts>32773</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="374"><ip.session_id>189</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525867938995361</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729011135936433</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729011135936433</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="375"><ip.session_id>189</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525903940200806</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728961609394435</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728961609394435</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5959</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5959</min_tcp_pkts><max_tcp_pkts>5959</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="376"><ip.session_id>190</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525867938995361</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11729011135936433</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11729011135936433</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="377"><ip.session_id>190</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525908946990967</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728954721630333</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728954721630333</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4445</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4445</min_tcp_pkts><max_tcp_pkts>4445</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="378"><ip.session_id>191</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525913000106812</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728949145827222</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728949145827222</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="379"><ip.session_id>191</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52592396736145</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728934058386563</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728934058386563</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>56738</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>56738</min_tcp_pkts><max_tcp_pkts>56738</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="380"><ip.session_id>192</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525913000106812</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728949145827222</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728949145827222</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="381"><ip.session_id>192</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525929927825928</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728925858706832</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728925858706832</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3011</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3011</min_tcp_pkts><max_tcp_pkts>3011</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="382"><ip.session_id>193</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525913000106812</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728949145827222</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728949145827222</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="383"><ip.session_id>193</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.5259530544281</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.023126602172851562</time_between_pkts_sum><time_between_pkts_avg>0.023126602172851562</time_between_pkts_avg><time_between_pkts_max>0.023126602172851562</time_between_pkts_max><time_between_pkts_min>0.023126602172851562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728894044058016</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728894044058016</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3301</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3301</min_tcp_pkts><max_tcp_pkts>3301</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="384"><ip.session_id>194</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525959968566895</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728884532495491</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728884532495491</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="385"><ip.session_id>194</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525995016098022</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03504753112792969</time_between_pkts_sum><time_between_pkts_avg>0.03504753112792969</time_between_pkts_avg><time_between_pkts_max>0.03504753112792969</time_between_pkts_max><time_between_pkts_min>0.03504753112792969</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728836318950331</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728836318950331</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7800</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7800</min_tcp_pkts><max_tcp_pkts>7800</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="386"><ip.session_id>195</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525959968566895</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728884532495491</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728884532495491</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="387"><ip.session_id>195</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.526005029678345</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728822543724518</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728822543724518</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1687</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1687</min_tcp_pkts><max_tcp_pkts>1687</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="388"><ip.session_id>196</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.525959968566895</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728884532495491</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728884532495491</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="389"><ip.session_id>196</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.526013135910034</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728811392374941</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728811392374941</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7625</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7625</min_tcp_pkts><max_tcp_pkts>7625</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="390"><ip.session_id>197</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.526036977767944</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02384185791015625</time_between_pkts_sum><time_between_pkts_avg>0.02384185791015625</time_between_pkts_avg><time_between_pkts_max>0.02384185791015625</time_between_pkts_max><time_between_pkts_min>0.02384185791015625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728778594410845</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728778594410845</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="391"><ip.session_id>197</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.526047945022583</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728763507408957</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728763507408957</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>981</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>981</min_tcp_pkts><max_tcp_pkts>981</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="392"><ip.session_id>198</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.526052951812744</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728756619877521</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728756619877521</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="393"><ip.session_id>198</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.526057958602905</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728749732354174</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728749732354174</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>49163</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>49163</min_tcp_pkts><max_tcp_pkts>49163</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="394"><ip.session_id>199</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.526081085205078</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.023126602172851562</time_between_pkts_sum><time_between_pkts_avg>0.023126602172851562</time_between_pkts_avg><time_between_pkts_max>0.023126602172851562</time_between_pkts_max><time_between_pkts_min>0.023126602172851562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728717918660833</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728717918660833</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="395"><ip.session_id>199</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.5260910987854</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728704143713135</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728704143713135</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3325</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3325</min_tcp_pkts><max_tcp_pkts>3325</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="396"><ip.session_id>200</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.526111125946045</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02002716064453125</time_between_pkts_sum><time_between_pkts_avg>0.02002716064453125</time_between_pkts_avg><time_between_pkts_max>0.02002716064453125</time_between_pkts_max><time_between_pkts_min>0.02002716064453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728676593914807</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728676593914807</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="397"><ip.session_id>200</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.526118040084839</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728667082704962</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728667082704962</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5986</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5986</min_tcp_pkts><max_tcp_pkts>5986</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="398"><ip.session_id>201</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52616810798645</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.050067901611328125</time_between_pkts_max><time_between_pkts_min>0.050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728598208887077</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728598208887077</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="399"><ip.session_id>201</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.526174068450928</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728590009676923</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728590009676923</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>563</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>563</min_tcp_pkts><max_tcp_pkts>563</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="400"><ip.session_id>202</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52620005607605</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728554261254605</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728554261254605</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="401"><ip.session_id>202</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.526222944259644</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02288818359375</time_between_pkts_sum><time_between_pkts_avg>0.02288818359375</time_between_pkts_avg><time_between_pkts_max>0.02288818359375</time_between_pkts_max><time_between_pkts_min>0.02288818359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728522776586073</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728522776586073</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>19</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>19</min_tcp_pkts><max_tcp_pkts>19</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="402"><ip.session_id>203</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.526232957839966</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728509002096746</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728509002096746</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="403"><ip.session_id>203</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.526238918304443</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728500803011316</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728500803011316</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10243</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10243</min_tcp_pkts><max_tcp_pkts>10243</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="404"><ip.session_id>204</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.526365995407104</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.1270771026611328</time_between_pkts_sum><time_between_pkts_avg>0.1270771026611328</time_between_pkts_avg><time_between_pkts_max>0.1270771026611328</time_between_pkts_max><time_between_pkts_min>0.1270771026611328</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728326001237453</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728326001237453</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="405"><ip.session_id>204</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.526371955871582</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11728317802407884</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11728317802407884</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>44501</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>44501</min_tcp_pkts><max_tcp_pkts>44501</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="406"><ip.session_id>205</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.526950120925903</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.5781650543212891</time_between_pkts_sum><time_between_pkts_avg>0.5781650543212891</time_between_pkts_avg><time_between_pkts_max>0.5781650543212891</time_between_pkts_max><time_between_pkts_min>0.5781650543212891</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11727522570419521</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11727522570419521</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="407"><ip.session_id>205</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52695608139038</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11727514372713209</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11727514372713209</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2003</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2003</min_tcp_pkts><max_tcp_pkts>2003</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="408"><ip.session_id>206</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.527063131332397</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.10704994201660156</time_between_pkts_sum><time_between_pkts_avg>0.10704994201660156</time_between_pkts_avg><time_between_pkts_max>0.10704994201660156</time_between_pkts_max><time_between_pkts_min>0.10704994201660156</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11727367143859117</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11727367143859117</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="409"><ip.session_id>206</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.527074098587036</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11727352060488172</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11727352060488172</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8022</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8022</min_tcp_pkts><max_tcp_pkts>8022</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="410"><ip.session_id>207</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.527143001556396</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.06890296936035156</time_between_pkts_sum><time_between_pkts_avg>0.06890296936035156</time_between_pkts_avg><time_between_pkts_max>0.06890296936035156</time_between_pkts_max><time_between_pkts_min>0.06890296936035156</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11727257298458316</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11727257298458316</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="411"><ip.session_id>207</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.527163982391357</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11727228443888328</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11727228443888328</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>65129</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>65129</min_tcp_pkts><max_tcp_pkts>65129</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="412"><ip.session_id>208</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.527244091033936</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.080108642578125</time_between_pkts_sum><time_between_pkts_avg>0.080108642578125</time_between_pkts_avg><time_between_pkts_max>0.080108642578125</time_between_pkts_max><time_between_pkts_min>0.080108642578125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11727118273199907</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11727118273199907</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="413"><ip.session_id>208</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52725100517273</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11727108764517291</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11727108764517291</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4000</min_tcp_pkts><max_tcp_pkts>4000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="414"><ip.session_id>209</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.527327060699463</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.07605552673339844</time_between_pkts_sum><time_between_pkts_avg>0.07605552673339844</time_between_pkts_avg><time_between_pkts_max>0.07605552673339844</time_between_pkts_max><time_between_pkts_min>0.07605552673339844</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11727004170026216</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11727004170026216</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="415"><ip.session_id>209</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52733302116394</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11726995973044627</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11726995973044627</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1002</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1002</min_tcp_pkts><max_tcp_pkts>1002</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="416"><ip.session_id>210</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.527436017990112</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.102996826171875</time_between_pkts_sum><time_between_pkts_avg>0.102996826171875</time_between_pkts_avg><time_between_pkts_max>0.102996826171875</time_between_pkts_max><time_between_pkts_min>0.102996826171875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11726854331012578</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11726854331012578</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="417"><ip.session_id>210</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.527442932128906</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11726844822757981</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11726844822757981</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1047</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1047</min_tcp_pkts><max_tcp_pkts>1047</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="418"><ip.session_id>211</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52753496170044</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.09202957153320312</time_between_pkts_sum><time_between_pkts_avg>0.09202957153320312</time_between_pkts_avg><time_between_pkts_max>0.09202957153320312</time_between_pkts_max><time_between_pkts_min>0.09202957153320312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1172671826607902</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1172671826607902</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="419"><ip.session_id>211</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.527543067932129</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11726707118730427</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11726707118730427</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1583</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1583</min_tcp_pkts><max_tcp_pkts>1583</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="420"><ip.session_id>212</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.527578115463257</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03504753112792969</time_between_pkts_sum><time_between_pkts_avg>0.03504753112792969</time_between_pkts_avg><time_between_pkts_max>0.03504753112792969</time_between_pkts_max><time_between_pkts_min>0.03504753112792969</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11726658923084816</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11726658923084816</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="421"><ip.session_id>212</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.527604103088379</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11726623186433309</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11726623186433309</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1149</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1149</min_tcp_pkts><max_tcp_pkts>1149</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="422"><ip.session_id>213</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.527693033218384</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.08893013000488281</time_between_pkts_sum><time_between_pkts_avg>0.08893013000488281</time_between_pkts_avg><time_between_pkts_max>0.08893013000488281</time_between_pkts_max><time_between_pkts_min>0.08893013000488281</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1172650089660411</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1172650089660411</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="423"><ip.session_id>213</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.527704000473022</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11726485815461361</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11726485815461361</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>20221</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>20221</min_tcp_pkts><max_tcp_pkts>20221</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="424"><ip.session_id>214</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.527835130691528</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.13113021850585938</time_between_pkts_sum><time_between_pkts_avg>0.13113021850585938</time_between_pkts_avg><time_between_pkts_max>0.13113021850585938</time_between_pkts_max><time_between_pkts_min>0.13113021850585938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1172630550045483</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1172630550045483</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="425"><ip.session_id>214</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.527841091156006</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11726297304449927</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11726297304449927</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2126</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2126</min_tcp_pkts><max_tcp_pkts>2126</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="426"><ip.session_id>215</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.527955055236816</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.11396408081054688</time_between_pkts_sum><time_between_pkts_avg>0.11396408081054688</time_between_pkts_avg><time_between_pkts_max>0.11396408081054688</time_between_pkts_max><time_between_pkts_min>0.11396408081054688</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11726140599039901</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11726140599039901</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="427"><ip.session_id>215</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.527975082397461</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02002716064453125</time_between_pkts_sum><time_between_pkts_avg>0.02002716064453125</time_between_pkts_avg><time_between_pkts_max>0.02002716064453125</time_between_pkts_max><time_between_pkts_min>0.02002716064453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1172611306128337</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1172611306128337</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2909</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2909</min_tcp_pkts><max_tcp_pkts>2909</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="428"><ip.session_id>216</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528098106384277</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.12302398681640625</time_between_pkts_sum><time_between_pkts_avg>0.12302398681640625</time_between_pkts_avg><time_between_pkts_max>0.12302398681640625</time_between_pkts_max><time_between_pkts_min>0.12302398681640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725943903616484</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725943903616484</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="429"><ip.session_id>216</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528105020523071</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725934396838197</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725934396838197</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1164</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1164</min_tcp_pkts><max_tcp_pkts>1164</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="430"><ip.session_id>217</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528171062469482</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.06604194641113281</time_between_pkts_sum><time_between_pkts_avg>0.06604194641113281</time_between_pkts_avg><time_between_pkts_max>0.06604194641113281</time_between_pkts_max><time_between_pkts_min>0.06604194641113281</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725843591491378</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725843591491378</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="431"><ip.session_id>217</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528177976608276</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725834084875746</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725834084875746</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>880</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>880</min_tcp_pkts><max_tcp_pkts>880</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="432"><ip.session_id>218</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528235912322998</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.05793571472167969</time_between_pkts_sum><time_between_pkts_avg>0.05793571472167969</time_between_pkts_avg><time_between_pkts_max>0.05793571472167969</time_between_pkts_max><time_between_pkts_min>0.05793571472167969</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725754426598771</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725754426598771</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="433"><ip.session_id>218</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52824592590332</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725740658611214</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725740658611214</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>33</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>33</min_tcp_pkts><max_tcp_pkts>33</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="434"><ip.session_id>219</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528235912322998</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725754426598771</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725754426598771</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="435"><ip.session_id>219</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528252124786377</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725732135587501</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725732135587501</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9594</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9594</min_tcp_pkts><max_tcp_pkts>9594</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="436"><ip.session_id>220</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528280019760132</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.027894973754882812</time_between_pkts_sum><time_between_pkts_avg>0.027894973754882812</time_between_pkts_avg><time_between_pkts_max>0.027894973754882812</time_between_pkts_max><time_between_pkts_min>0.027894973754882812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725693782134117</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725693782134117</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="437"><ip.session_id>220</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528305053710938</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025033950805664062</time_between_pkts_sum><time_between_pkts_avg>0.025033950805664062</time_between_pkts_avg><time_between_pkts_max>0.025033950805664062</time_between_pkts_max><time_between_pkts_min>0.025033950805664062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725659362581878</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725659362581878</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>52869</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>52869</min_tcp_pkts><max_tcp_pkts>52869</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="438"><ip.session_id>221</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528311014175415</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725651167480176</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725651167480176</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="439"><ip.session_id>221</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528346061706543</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03504753112792969</time_between_pkts_sum><time_between_pkts_avg>0.03504753112792969</time_between_pkts_avg><time_between_pkts_max>0.03504753112792969</time_between_pkts_max><time_between_pkts_min>0.03504753112792969</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725602980513875</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725602980513875</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2200</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2200</min_tcp_pkts><max_tcp_pkts>2200</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="440"><ip.session_id>222</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.52835202217102</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725594785490984</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725594785490984</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="441"><ip.session_id>222</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528357982635498</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725586590479548</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725586590479548</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3030</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3030</min_tcp_pkts><max_tcp_pkts>3030</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="442"><ip.session_id>223</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528418064117432</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.06008148193359375</time_between_pkts_sum><time_between_pkts_avg>0.06008148193359375</time_between_pkts_avg><time_between_pkts_max>0.06008148193359375</time_between_pkts_max><time_between_pkts_min>0.06008148193359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725503985403951</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725503985403951</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="443"><ip.session_id>223</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528439044952393</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725475139461258</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725475139461258</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8099</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8099</min_tcp_pkts><max_tcp_pkts>8099</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="444"><ip.session_id>224</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528418064117432</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725503985403951</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725503985403951</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="445"><ip.session_id>224</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528445959091187</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725465633443055</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725465633443055</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>16992</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>16992</min_tcp_pkts><max_tcp_pkts>16992</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="446"><ip.session_id>225</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528480052947998</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03409385681152344</time_between_pkts_sum><time_between_pkts_avg>0.03409385681152344</time_between_pkts_avg><time_between_pkts_max>0.03409385681152344</time_between_pkts_max><time_between_pkts_min>0.03409385681152344</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725418759164886</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725418759164886</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="447"><ip.session_id>225</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528486967086792</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725409253238099</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725409253238099</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>406</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>406</min_tcp_pkts><max_tcp_pkts>406</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="448"><ip.session_id>226</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528494119644165</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725399419536951</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725399419536951</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="449"><ip.session_id>226</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528502941131592</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725387291328254</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725387291328254</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4899</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4899</min_tcp_pkts><max_tcp_pkts>4899</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="450"><ip.session_id>227</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528548002243042</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04506111145019531</time_between_pkts_sum><time_between_pkts_avg>0.04506111145019531</time_between_pkts_avg><time_between_pkts_max>0.04506111145019531</time_between_pkts_max><time_between_pkts_min>0.04506111145019531</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11725325339518473</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11725325339518473</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="451"><ip.session_id>227</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.528557062149048</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1172531288367809</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1172531288367809</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5432</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5432</min_tcp_pkts><max_tcp_pkts>5432</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="452"><ip.session_id>228</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561123132705688</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>32.566070556640625</time_between_pkts_sum><time_between_pkts_avg>32.566070556640625</time_between_pkts_avg><time_between_pkts_max>32.566070556640625</time_between_pkts_max><time_between_pkts_min>32.566070556640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11680710398612809</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11680710398612809</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="453"><ip.session_id>228</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561142921447754</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.019788742065429688</time_between_pkts_sum><time_between_pkts_avg>0.019788742065429688</time_between_pkts_avg><time_between_pkts_max>0.019788742065429688</time_between_pkts_max><time_between_pkts_min>0.019788742065429688</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11680683399114337</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11680683399114337</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>48080</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>48080</min_tcp_pkts><max_tcp_pkts>48080</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="454"><ip.session_id>229</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561218023300171</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.07510185241699219</time_between_pkts_sum><time_between_pkts_avg>0.07510185241699219</time_between_pkts_avg><time_between_pkts_max>0.07510185241699219</time_between_pkts_max><time_between_pkts_min>0.07510185241699219</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11680580932273944</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11680580932273944</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="455"><ip.session_id>229</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56122899055481</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11680565969012763</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11680565969012763</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2119</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2119</min_tcp_pkts><max_tcp_pkts>2119</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="456"><ip.session_id>230</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561218023300171</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11680580932273944</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11680580932273944</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="457"><ip.session_id>230</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561237096786499</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11680554909235662</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11680554909235662</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>27353</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>27353</min_tcp_pkts><max_tcp_pkts>27353</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="458"><ip.session_id>231</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561243057250977</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11680546777059977</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11680546777059977</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="459"><ip.session_id>231</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561255931854248</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.012874603271484375</time_between_pkts_sum><time_between_pkts_avg>0.012874603271484375</time_between_pkts_avg><time_between_pkts_max>0.012874603271484375</time_between_pkts_max><time_between_pkts_min>0.012874603271484375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11680529211599144</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11680529211599144</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5060</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5060</min_tcp_pkts><max_tcp_pkts>5060</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="460"><ip.session_id>232</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561264038085938</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1168051815189165</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1168051815189165</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="461"><ip.session_id>232</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561293125152588</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.029087066650390625</time_between_pkts_sum><time_between_pkts_avg>0.029087066650390625</time_between_pkts_avg><time_between_pkts_max>0.029087066650390625</time_between_pkts_max><time_between_pkts_min>0.029087066650390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11680478467231281</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11680478467231281</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5269</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5269</min_tcp_pkts><max_tcp_pkts>5269</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="462"><ip.session_id>233</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561315059661865</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02193450927734375</time_between_pkts_sum><time_between_pkts_avg>0.02193450927734375</time_between_pkts_avg><time_between_pkts_max>0.02193450927734375</time_between_pkts_max><time_between_pkts_min>0.02193450927734375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.116804485412723</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.116804485412723</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="463"><ip.session_id>233</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561327934265137</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.012874603271484375</time_between_pkts_sum><time_between_pkts_avg>0.012874603271484375</time_between_pkts_avg><time_between_pkts_max>0.012874603271484375</time_between_pkts_max><time_between_pkts_min>0.012874603271484375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11680430976106923</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11680430976106923</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4126</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4126</min_tcp_pkts><max_tcp_pkts>4126</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="464"><ip.session_id>234</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561315059661865</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.116804485412723</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.116804485412723</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="465"><ip.session_id>234</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561334133148193</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11680422518823917</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11680422518823917</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1236</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1236</min_tcp_pkts><max_tcp_pkts>1236</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="466"><ip.session_id>235</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561315059661865</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.116804485412723</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.116804485412723</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="467"><ip.session_id>235</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56135606765747</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02193450927734375</time_between_pkts_sum><time_between_pkts_avg>0.02193450927734375</time_between_pkts_avg><time_between_pkts_max>0.02193450927734375</time_between_pkts_max><time_between_pkts_min>0.02193450927734375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1168039259315162</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1168039259315162</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>497</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>497</min_tcp_pkts><max_tcp_pkts>497</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="468"><ip.session_id>236</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561315059661865</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.116804485412723</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.116804485412723</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="469"><ip.session_id>236</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561366081237793</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11680378931482639</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11680378931482639</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32770</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32770</min_tcp_pkts><max_tcp_pkts>32770</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="470"><ip.session_id>237</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561370134353638</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11680373401768565</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11680373401768565</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="471"><ip.session_id>237</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561376094818115</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11680365269845616</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11680365269845616</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>15003</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>15003</min_tcp_pkts><max_tcp_pkts>15003</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="472"><ip.session_id>238</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561386108398438</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11680351608240551</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11680351608240551</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="473"><ip.session_id>238</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561391115188599</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11680344777450002</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11680344777450002</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8090</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8090</min_tcp_pkts><max_tcp_pkts>8090</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="474"><ip.session_id>239</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561698913574219</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.3077983856201172</time_between_pkts_sum><time_between_pkts_avg>0.3077983856201172</time_between_pkts_avg><time_between_pkts_max>0.3077983856201172</time_between_pkts_max><time_between_pkts_min>0.3077983856201172</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11679924861811497</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11679924861811497</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="475"><ip.session_id>239</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.561720132827759</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.021219253540039062</time_between_pkts_sum><time_between_pkts_avg>0.021219253540039062</time_between_pkts_avg><time_between_pkts_max>0.021219253540039062</time_between_pkts_max><time_between_pkts_min>0.021219253540039062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11679895914440744</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11679895914440744</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5061</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5061</min_tcp_pkts><max_tcp_pkts>5061</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="476"><ip.session_id>240</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562194108963013</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.47397613525390625</time_between_pkts_sum><time_between_pkts_avg>0.47397613525390625</time_between_pkts_avg><time_between_pkts_max>0.47397613525390625</time_between_pkts_max><time_between_pkts_min>0.47397613525390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11679249352139627</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11679249352139627</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="477"><ip.session_id>240</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56220006942749</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11679241221781737</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11679241221781737</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>82</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>82</min_tcp_pkts><max_tcp_pkts>82</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="478"><ip.session_id>241</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562237977981567</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03790855407714844</time_between_pkts_sum><time_between_pkts_avg>0.03790855407714844</time_between_pkts_avg><time_between_pkts_max>0.03790855407714844</time_between_pkts_max><time_between_pkts_min>0.03790855407714844</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11679189512970493</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11679189512970493</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="479"><ip.session_id>241</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56224799156189</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11679175854115668</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11679175854115668</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>49176</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>49176</min_tcp_pkts><max_tcp_pkts>49176</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="480"><ip.session_id>242</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562237977981567</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11679189512970493</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11679189512970493</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="481"><ip.session_id>242</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562289953231812</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.041961669921875</time_between_pkts_sum><time_between_pkts_avg>0.041961669921875</time_between_pkts_avg><time_between_pkts_max>0.041961669921875</time_between_pkts_max><time_between_pkts_min>0.041961669921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11679118617357181</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11679118617357181</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>19842</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>19842</min_tcp_pkts><max_tcp_pkts>19842</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="482"><ip.session_id>243</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562298059463501</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11679107560320766</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11679107560320766</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="483"><ip.session_id>243</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562304973602295</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11679098129335662</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11679098129335662</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9878</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9878</min_tcp_pkts><max_tcp_pkts>9878</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="484"><ip.session_id>244</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562331914901733</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.026941299438476562</time_between_pkts_sum><time_between_pkts_avg>0.026941299438476562</time_between_pkts_avg><time_between_pkts_max>0.026941299438476562</time_between_pkts_max><time_between_pkts_min>0.026941299438476562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11679061381159699</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11679061381159699</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="485"><ip.session_id>244</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562353134155273</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.021219253540039062</time_between_pkts_sum><time_between_pkts_avg>0.021219253540039062</time_between_pkts_avg><time_between_pkts_max>0.021219253540039062</time_between_pkts_max><time_between_pkts_min>0.021219253540039062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11679032438068859</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11679032438068859</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>301</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>301</min_tcp_pkts><max_tcp_pkts>301</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="486"><ip.session_id>245</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562397003173828</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0438690185546875</time_between_pkts_sum><time_between_pkts_avg>0.0438690185546875</time_between_pkts_avg><time_between_pkts_max>0.0438690185546875</time_between_pkts_max><time_between_pkts_min>0.0438690185546875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678972601122437</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678972601122437</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="487"><ip.session_id>245</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562427043914795</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030040740966796875</time_between_pkts_sum><time_between_pkts_avg>0.030040740966796875</time_between_pkts_avg><time_between_pkts_max>0.030040740966796875</time_between_pkts_max><time_between_pkts_min>0.030040740966796875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678931626175863</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678931626175863</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6792</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6792</min_tcp_pkts><max_tcp_pkts>6792</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="488"><ip.session_id>246</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562397003173828</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678972601122437</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678972601122437</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="489"><ip.session_id>246</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562433004379272</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678923496260328</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678923496260328</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8402</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8402</min_tcp_pkts><max_tcp_pkts>8402</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="490"><ip.session_id>247</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562397003173828</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678972601122437</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678972601122437</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="491"><ip.session_id>247</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562438011169434</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678916667140027</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678916667140027</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8007</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8007</min_tcp_pkts><max_tcp_pkts>8007</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="492"><ip.session_id>248</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562441110610962</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678912439593366</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678912439593366</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="493"><ip.session_id>248</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562453031539917</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.011920928955078125</time_between_pkts_max><time_between_pkts_min>0.011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1167889617982704</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1167889617982704</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7778</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7778</min_tcp_pkts><max_tcp_pkts>7778</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="494"><ip.session_id>249</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562441110610962</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678912439593366</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678912439593366</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="495"><ip.session_id>249</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562458992004395</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678888049960856</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678888049960856</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1119</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1119</min_tcp_pkts><max_tcp_pkts>1119</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="496"><ip.session_id>250</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562463998794556</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678881220882008</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678881220882008</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="497"><ip.session_id>250</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562474966049194</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678866261975296</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678866261975296</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5910</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5910</min_tcp_pkts><max_tcp_pkts>5910</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="498"><ip.session_id>251</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562464952468872</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1167887992010599</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1167887992010599</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="499"><ip.session_id>251</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562482118606567</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678856506187216</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678856506187216</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1700</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1700</min_tcp_pkts><max_tcp_pkts>1700</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="500"><ip.session_id>252</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562464952468872</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1167887992010599</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1167887992010599</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="501"><ip.session_id>252</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562487125396729</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678849677145256</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678849677145256</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1717</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1717</min_tcp_pkts><max_tcp_pkts>1717</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="502"><ip.session_id>253</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562490940093994</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1167884447407103</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1167884447407103</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="503"><ip.session_id>253</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562498092651367</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1167883471831935</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1167883471831935</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5440</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5440</min_tcp_pkts><max_tcp_pkts>5440</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="504"><ip.session_id>254</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562490940093994</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1167884447407103</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1167884447407103</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="505"><ip.session_id>254</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56252408027649</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678799272558768</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678799272558768</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3971</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3971</min_tcp_pkts><max_tcp_pkts>3971</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="506"><ip.session_id>255</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562490940093994</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1167884447407103</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1167884447407103</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="507"><ip.session_id>255</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56254506111145</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678770655954905</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678770655954905</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>19315</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>19315</min_tcp_pkts><max_tcp_pkts>19315</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="508"><ip.session_id>256</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56255292892456</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1167875992476461</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1167875992476461</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="509"><ip.session_id>256</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562557935714722</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.116787530958356</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.116787530958356</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>55600</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>55600</min_tcp_pkts><max_tcp_pkts>55600</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="510"><ip.session_id>257</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562566995620728</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678740738746264</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678740738746264</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="511"><ip.session_id>257</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562571048736572</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678735210583185</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678735210583185</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5200</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5200</min_tcp_pkts><max_tcp_pkts>5200</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="512"><ip.session_id>258</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562586069107056</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015020370483398438</time_between_pkts_sum><time_between_pkts_avg>0.015020370483398438</time_between_pkts_avg><time_between_pkts_max>0.015020370483398438</time_between_pkts_max><time_between_pkts_min>0.015020370483398438</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678714723906822</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678714723906822</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="513"><ip.session_id>258</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562592029571533</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678706594293263</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678706594293263</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3546</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3546</min_tcp_pkts><max_tcp_pkts>3546</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="514"><ip.session_id>259</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56259799003601</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678698464691023</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678698464691023</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="515"><ip.session_id>259</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562614917755127</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.016927719116210938</time_between_pkts_sum><time_between_pkts_avg>0.016927719116210938</time_between_pkts_avg><time_between_pkts_max>0.016927719116210938</time_between_pkts_max><time_between_pkts_min>0.016927719116210938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678675376682378</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678675376682378</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1186</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1186</min_tcp_pkts><max_tcp_pkts>1186</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="516"><ip.session_id>260</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562623023986816</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678664320485209</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678664320485209</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="517"><ip.session_id>260</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562628030776978</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678657491668004</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678657491668004</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5221</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5221</min_tcp_pkts><max_tcp_pkts>5221</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="518"><ip.session_id>261</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562642097473145</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014066696166992188</time_between_pkts_sum><time_between_pkts_avg>0.014066696166992188</time_between_pkts_avg><time_between_pkts_max>0.014066696166992188</time_between_pkts_max><time_between_pkts_min>0.014066696166992188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678638305986214</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678638305986214</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="519"><ip.session_id>261</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562663078308105</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678609690171177</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678609690171177</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>34572</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>34572</min_tcp_pkts><max_tcp_pkts>34572</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="520"><ip.session_id>262</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562670946121216</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678598959276693</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678598959276693</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="521"><ip.session_id>262</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562677145004272</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678590504646442</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678590504646442</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3918</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3918</min_tcp_pkts><max_tcp_pkts>3918</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="522"><ip.session_id>263</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562701940536499</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0247955322265625</time_between_pkts_sum><time_between_pkts_avg>0.0247955322265625</time_between_pkts_avg><time_between_pkts_max>0.0247955322265625</time_between_pkts_max><time_between_pkts_min>0.0247955322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678556686247854</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678556686247854</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="523"><ip.session_id>263</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562734127044678</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03218650817871094</time_between_pkts_sum><time_between_pkts_avg>0.03218650817871094</time_between_pkts_avg><time_between_pkts_max>0.03218650817871094</time_between_pkts_max><time_between_pkts_min>0.03218650817871094</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678512787657203</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678512787657203</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1065</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1065</min_tcp_pkts><max_tcp_pkts>1065</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="524"><ip.session_id>264</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562741994857788</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678502056940794</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678502056940794</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="525"><ip.session_id>264</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56275200843811</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678488399693887</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678488399693887</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1334</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1334</min_tcp_pkts><max_tcp_pkts>1334</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="526"><ip.session_id>265</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562741994857788</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678502056940794</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678502056940794</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="527"><ip.session_id>265</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562761068344116</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678476043164684</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678476043164684</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>714</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>714</min_tcp_pkts><max_tcp_pkts>714</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="528"><ip.session_id>266</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562741994857788</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678502056940794</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678502056940794</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="529"><ip.session_id>266</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562788009643555</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.026941299438476562</time_between_pkts_sum><time_between_pkts_avg>0.026941299438476562</time_between_pkts_avg><time_between_pkts_max>0.026941299438476562</time_between_pkts_max><time_between_pkts_min>0.026941299438476562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678439298903387</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678439298903387</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>49400</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>49400</min_tcp_pkts><max_tcp_pkts>49400</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="530"><ip.session_id>267</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562793970108032</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678431169673273</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678431169673273</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="531"><ip.session_id>267</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562803030014038</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678418813265176</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678418813265176</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>106</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>106</min_tcp_pkts><max_tcp_pkts>106</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="532"><ip.session_id>268</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562809944152832</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11678409383392378</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11678409383392378</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="533"><ip.session_id>268</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.562813997268677</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1167840385554299</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1167840385554299</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>50000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>50000</min_tcp_pkts><max_tcp_pkts>50000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="534"><ip.session_id>269</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.563133955001831</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.3199577331542969</time_between_pkts_sum><time_between_pkts_avg>0.3199577331542969</time_between_pkts_avg><time_between_pkts_max>0.3199577331542969</time_between_pkts_max><time_between_pkts_min>0.3199577331542969</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11677967497120464</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11677967497120464</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="535"><ip.session_id>269</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.563139915466309</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1167795936854717</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1167795936854717</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>12265</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>12265</min_tcp_pkts><max_tcp_pkts>12265</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="536"><ip.session_id>270</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.563146114349365</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11677950914842948</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11677950914842948</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="537"><ip.session_id>270</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.563173055648804</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.026941299438476562</time_between_pkts_sum><time_between_pkts_avg>0.026941299438476562</time_between_pkts_avg><time_between_pkts_max>0.026941299438476562</time_between_pkts_max><time_between_pkts_min>0.026941299438476562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11677914173886017</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11677914173886017</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2107</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2107</min_tcp_pkts><max_tcp_pkts>2107</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="538"><ip.session_id>271</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.563146114349365</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11677950914842948</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11677950914842948</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="539"><ip.session_id>271</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.563193082809448</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02002716064453125</time_between_pkts_sum><time_between_pkts_avg>0.02002716064453125</time_between_pkts_avg><time_between_pkts_max>0.02002716064453125</time_between_pkts_max><time_between_pkts_min>0.02002716064453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11677886862174032</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11677886862174032</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6001</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6001</min_tcp_pkts><max_tcp_pkts>6001</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="540"><ip.session_id>272</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.563200950622559</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11677876132607846</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11677876132607846</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="541"><ip.session_id>272</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.563228130340576</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.027179718017578125</time_between_pkts_sum><time_between_pkts_avg>0.027179718017578125</time_between_pkts_avg><time_between_pkts_max>0.027179718017578125</time_between_pkts_max><time_between_pkts_min>0.027179718017578125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11677839066985456</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11677839066985456</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8291</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8291</min_tcp_pkts><max_tcp_pkts>8291</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="542"><ip.session_id>273</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.563200950622559</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11677876132607846</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11677876132607846</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="543"><ip.session_id>273</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.563235998153687</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11677828337507098</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11677828337507098</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1301</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1301</min_tcp_pkts><max_tcp_pkts>1301</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="544"><ip.session_id>274</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.563200950622559</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11677876132607846</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11677876132607846</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="545"><ip.session_id>274</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.563241004943848</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11677821509667499</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11677821509667499</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1046</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1046</min_tcp_pkts><max_tcp_pkts>1046</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="546"><ip.session_id>275</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56324291229248</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0019073486328125</time_between_pkts_sum><time_between_pkts_avg>0.0019073486328125</time_between_pkts_avg><time_between_pkts_max>0.0019073486328125</time_between_pkts_max><time_between_pkts_min>0.0019073486328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11677818908587848</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11677818908587848</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="547"><ip.session_id>275</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.563247919082642</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11677812080759276</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11677812080759276</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>61900</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>61900</min_tcp_pkts><max_tcp_pkts>61900</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="548"><ip.session_id>276</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56328010559082</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03218650817871094</time_between_pkts_sum><time_between_pkts_avg>0.03218650817871094</time_between_pkts_avg><time_between_pkts_max>0.03218650817871094</time_between_pkts_max><time_between_pkts_min>0.03218650817871094</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11677768187766238</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11677768187766238</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="549"><ip.session_id>276</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.563288927078247</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11677756157892423</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11677756157892423</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3323</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3323</min_tcp_pkts><max_tcp_pkts>3323</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="550"><ip.session_id>277</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56328010559082</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11677768187766238</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11677768187766238</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="551"><ip.session_id>277</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.563297986984253</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11677743802912681</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11677743802912681</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9091</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9091</min_tcp_pkts><max_tcp_pkts>9091</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="552"><ip.session_id>278</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564682006835938</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>1.3840198516845703</time_between_pkts_sum><time_between_pkts_avg>1.3840198516845703</time_between_pkts_avg><time_between_pkts_max>1.3840198516845703</time_between_pkts_max><time_between_pkts_min>1.3840198516845703</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1167585672418247</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1167585672418247</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="553"><ip.session_id>278</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564692974090576</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675841773022609</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675841773022609</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1666</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1666</min_tcp_pkts><max_tcp_pkts>1666</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="554"><ip.session_id>279</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564780950546265</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.08797645568847656</time_between_pkts_sum><time_between_pkts_avg>0.08797645568847656</time_between_pkts_avg><time_between_pkts_max>0.08797645568847656</time_between_pkts_max><time_between_pkts_min>0.08797645568847656</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675721840104032</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675721840104032</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="555"><ip.session_id>279</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564786911010742</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675713714656663</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675713714656663</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1058</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1058</min_tcp_pkts><max_tcp_pkts>1058</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="556"><ip.session_id>280</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564810991287231</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.024080276489257812</time_between_pkts_sum><time_between_pkts_avg>0.024080276489257812</time_between_pkts_avg><time_between_pkts_max>0.024080276489257812</time_between_pkts_max><time_between_pkts_min>0.024080276489257812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675680887964429</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675680887964429</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="557"><ip.session_id>280</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564821004867554</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675667237315067</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675667237315067</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>62078</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>62078</min_tcp_pkts><max_tcp_pkts>62078</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="558"><ip.session_id>281</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564863920211792</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04291534423828125</time_between_pkts_sum><time_between_pkts_avg>0.04291534423828125</time_between_pkts_avg><time_between_pkts_max>0.04291534423828125</time_between_pkts_max><time_between_pkts_min>0.04291534423828125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675608734893618</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675608734893618</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="559"><ip.session_id>281</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564877033233643</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.013113021850585938</time_between_pkts_sum><time_between_pkts_avg>0.013113021850585938</time_between_pkts_avg><time_between_pkts_max>0.013113021850585938</time_between_pkts_max><time_between_pkts_min>0.013113021850585938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675590859270668</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675590859270668</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9080</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9080</min_tcp_pkts><max_tcp_pkts>9080</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="560"><ip.session_id>282</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564863920211792</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675608734893618</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675608734893618</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="561"><ip.session_id>282</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564887046813965</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1167557720883182</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1167557720883182</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>720</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>720</min_tcp_pkts><max_tcp_pkts>720</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="562"><ip.session_id>283</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564894914627075</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675566483509402</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675566483509402</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="563"><ip.session_id>283</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56491994857788</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025033950805664062</time_between_pkts_sum><time_between_pkts_avg>0.025033950805664062</time_between_pkts_avg><time_between_pkts_max>0.025033950805664062</time_between_pkts_max><time_between_pkts_min>0.025033950805664062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675532357614621</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675532357614621</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1091</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1091</min_tcp_pkts><max_tcp_pkts>1091</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="564"><ip.session_id>284</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564894914627075</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675566483509402</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675566483509402</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="565"><ip.session_id>284</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564929962158203</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675518707312565</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675518707312565</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9000</min_tcp_pkts><max_tcp_pkts>9000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="566"><ip.session_id>285</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564894914627075</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675566483509402</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675566483509402</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="567"><ip.session_id>285</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564963102340698</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03314018249511719</time_between_pkts_sum><time_between_pkts_avg>0.03314018249511719</time_between_pkts_avg><time_between_pkts_max>0.03314018249511719</time_between_pkts_max><time_between_pkts_min>0.03314018249511719</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1167547353154052</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1167547353154052</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>801</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>801</min_tcp_pkts><max_tcp_pkts>801</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="568"><ip.session_id>286</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564894914627075</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675566483509402</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675566483509402</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="569"><ip.session_id>286</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564985036849976</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02193450927734375</time_between_pkts_sum><time_between_pkts_avg>0.02193450927734375</time_between_pkts_avg><time_between_pkts_max>0.02193450927734375</time_between_pkts_max><time_between_pkts_min>0.02193450927734375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675443631221794</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675443631221794</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1755</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1755</min_tcp_pkts><max_tcp_pkts>1755</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="570"><ip.session_id>287</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564894914627075</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675566483509402</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675566483509402</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="571"><ip.session_id>287</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.564993143081665</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1167543258114276</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1167543258114276</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7402</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7402</min_tcp_pkts><max_tcp_pkts>7402</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="572"><ip.session_id>288</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56500506401062</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.011920928955078125</time_between_pkts_max><time_between_pkts_min>0.011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675416331064531</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675416331064531</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="573"><ip.session_id>288</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.565035104751587</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030040740966796875</time_between_pkts_sum><time_between_pkts_avg>0.030040740966796875</time_between_pkts_avg><time_between_pkts_max>0.030040740966796875</time_between_pkts_max><time_between_pkts_min>0.030040740966796875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675375381068016</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675375381068016</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3003</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3003</min_tcp_pkts><max_tcp_pkts>3003</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="574"><ip.session_id>289</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56500506401062</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675416331064531</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675416331064531</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="575"><ip.session_id>289</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56504511833191</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675361731133013</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675361731133013</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1076</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1076</min_tcp_pkts><max_tcp_pkts>1076</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="576"><ip.session_id>290</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56500506401062</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675416331064531</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675416331064531</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="577"><ip.session_id>290</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.565067052841187</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02193450927734375</time_between_pkts_sum><time_between_pkts_avg>0.02193450927734375</time_between_pkts_avg><time_between_pkts_max>0.02193450927734375</time_between_pkts_max><time_between_pkts_min>0.02193450927734375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675331831386913</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675331831386913</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>14441</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>14441</min_tcp_pkts><max_tcp_pkts>14441</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="578"><ip.session_id>291</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56500506401062</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675416331064531</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675416331064531</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="579"><ip.session_id>291</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.565072059631348</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675325006466336</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675325006466336</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9503</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9503</min_tcp_pkts><max_tcp_pkts>9503</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="580"><ip.session_id>292</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56500506401062</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675416331064531</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675416331064531</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="581"><ip.session_id>292</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.565077066421509</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675318181553739</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675318181553739</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1086</min_tcp_pkts><max_tcp_pkts>1086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="582"><ip.session_id>293</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56508493423462</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675307456707207</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675307456707207</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="583"><ip.session_id>293</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.565102100372314</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0171661376953125</time_between_pkts_sum><time_between_pkts_avg>0.0171661376953125</time_between_pkts_avg><time_between_pkts_max>0.0171661376953125</time_between_pkts_max><time_between_pkts_min>0.0171661376953125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675284057110437</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675284057110437</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>20005</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>20005</min_tcp_pkts><max_tcp_pkts>20005</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="584"><ip.session_id>294</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56508493423462</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675307456707207</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675307456707207</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="585"><ip.session_id>294</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.565108060836792</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675275932272386</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675275932272386</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>38292</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>38292</min_tcp_pkts><max_tcp_pkts>38292</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="586"><ip.session_id>295</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56508493423462</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675307456707207</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675307456707207</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="587"><ip.session_id>295</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56513500213623</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.026941299438476562</time_between_pkts_sum><time_between_pkts_avg>0.026941299438476562</time_between_pkts_avg><time_between_pkts_max>0.026941299438476562</time_between_pkts_max><time_between_pkts_min>0.026941299438476562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675239208145465</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675239208145465</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8087</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8087</min_tcp_pkts><max_tcp_pkts>8087</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="588"><ip.session_id>296</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56508493423462</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675307456707207</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675307456707207</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="589"><ip.session_id>296</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56514310836792</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675228158453374</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675228158453374</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1259</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1259</min_tcp_pkts><max_tcp_pkts>1259</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="590"><ip.session_id>297</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56508493423462</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675307456707207</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675307456707207</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="591"><ip.session_id>297</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56515097618103</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1167521743377223</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1167521743377223</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>800</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>800</min_tcp_pkts><max_tcp_pkts>800</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="592"><ip.session_id>298</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56508493423462</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675307456707207</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675307456707207</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="593"><ip.session_id>298</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.565155029296875</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675211908944179</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675211908944179</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9101</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9101</min_tcp_pkts><max_tcp_pkts>9101</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="594"><ip.session_id>299</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56508493423462</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675307456707207</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675307456707207</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="595"><ip.session_id>299</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.565158128738403</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675207684079197</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675207684079197</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3371</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3371</min_tcp_pkts><max_tcp_pkts>3371</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="596"><ip.session_id>300</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.56508493423462</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675307456707207</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675307456707207</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="597"><ip.session_id>300</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.565160989761353</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675203784206542</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675203784206542</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3995</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3995</min_tcp_pkts><max_tcp_pkts>3995</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="598"><ip.session_id>301</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.565179109573364</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.01811981201171875</time_between_pkts_sum><time_between_pkts_avg>0.01811981201171875</time_between_pkts_avg><time_between_pkts_max>0.01811981201171875</time_between_pkts_max><time_between_pkts_min>0.01811981201171875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1167517908507357</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1167517908507357</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="599"><ip.session_id>301</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.565186977386475</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675168360482581</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675168360482581</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1029</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1029</min_tcp_pkts><max_tcp_pkts>1029</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="600"><ip.session_id>302</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.565179109573364</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1167517908507357</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1167517908507357</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="601"><ip.session_id>302</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.565192937850952</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675160235805555</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675160235805555</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2608</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2608</min_tcp_pkts><max_tcp_pkts>2608</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="602"><ip.session_id>303</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.565179109573364</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1167517908507357</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1167517908507357</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="603"><ip.session_id>303</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.565212965011597</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02002716064453125</time_between_pkts_sum><time_between_pkts_avg>0.02002716064453125</time_between_pkts_avg><time_between_pkts_max>0.02002716064453125</time_between_pkts_max><time_between_pkts_min>0.02002716064453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675132936973577</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675132936973577</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1094</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1094</min_tcp_pkts><max_tcp_pkts>1094</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="604"><ip.session_id>304</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.565221071243286</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675121887482641</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675121887482641</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="605"><ip.session_id>304</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.565242052078247</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11675093288897337</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11675093288897337</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1533</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1533</min_tcp_pkts><max_tcp_pkts>1533</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="606"><ip.session_id>305</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.600559949874878</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>35.31789779663086</time_between_pkts_sum><time_between_pkts_avg>35.31789779663086</time_between_pkts_avg><time_between_pkts_max>35.31789779663086</time_between_pkts_max><time_between_pkts_min>35.31789779663086</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11627149927773577</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11627149927773577</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="607"><ip.session_id>305</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.600597143173218</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03719329833984375</time_between_pkts_sum><time_between_pkts_avg>0.03719329833984375</time_between_pkts_avg><time_between_pkts_max>0.03719329833984375</time_between_pkts_max><time_between_pkts_min>0.03719329833984375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11627099646142092</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11627099646142092</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>668</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>668</min_tcp_pkts><max_tcp_pkts>668</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="608"><ip.session_id>306</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.600605964660645</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11627087720434326</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11627087720434326</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="609"><ip.session_id>306</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.600645065307617</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03910064697265625</time_between_pkts_sum><time_between_pkts_avg>0.03910064697265625</time_between_pkts_avg><time_between_pkts_max>0.03910064697265625</time_between_pkts_max><time_between_pkts_min>0.03910064697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162703486083498</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162703486083498</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1041</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1041</min_tcp_pkts><max_tcp_pkts>1041</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="610"><ip.session_id>307</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.600605964660645</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11627087720434326</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11627087720434326</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="611"><ip.session_id>307</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.600672006607056</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.026941299438476562</time_between_pkts_sum><time_between_pkts_avg>0.026941299438476562</time_between_pkts_avg><time_between_pkts_max>0.026941299438476562</time_between_pkts_max><time_between_pkts_min>0.026941299438476562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626998439561441</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626998439561441</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2035</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2035</min_tcp_pkts><max_tcp_pkts>2035</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="612"><ip.session_id>308</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60067892074585</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626989092545734</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626989092545734</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="613"><ip.session_id>308</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60068392753601</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626982324026498</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626982324026498</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1417</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1417</min_tcp_pkts><max_tcp_pkts>1417</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="614"><ip.session_id>309</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.600714921951294</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.030994415283203125</time_between_pkts_max><time_between_pkts_min>0.030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626940423844721</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626940423844721</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="615"><ip.session_id>309</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.600722074508667</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162693075461489</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162693075461489</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1070</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1070</min_tcp_pkts><max_tcp_pkts>1070</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="616"><ip.session_id>310</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.600779056549072</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.05698204040527344</time_between_pkts_sum><time_between_pkts_avg>0.05698204040527344</time_between_pkts_avg><time_between_pkts_max>0.05698204040527344</time_between_pkts_max><time_between_pkts_min>0.05698204040527344</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626853723658312</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626853723658312</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="617"><ip.session_id>310</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60080099105835</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02193450927734375</time_between_pkts_sum><time_between_pkts_avg>0.02193450927734375</time_between_pkts_avg><time_between_pkts_max>0.02193450927734375</time_between_pkts_max><time_between_pkts_min>0.02193450927734375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162682407184668</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162682407184668</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5002</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5002</min_tcp_pkts><max_tcp_pkts>5002</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="618"><ip.session_id>311</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.600868940353394</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.06794929504394531</time_between_pkts_sum><time_between_pkts_avg>0.06794929504394531</time_between_pkts_avg><time_between_pkts_max>0.06794929504394531</time_between_pkts_max><time_between_pkts_min>0.06794929504394531</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162673221665103</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162673221665103</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="619"><ip.session_id>311</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.6008939743042</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025033950805664062</time_between_pkts_sum><time_between_pkts_avg>0.025033950805664062</time_between_pkts_avg><time_between_pkts_max>0.025033950805664062</time_between_pkts_max><time_between_pkts_min>0.025033950805664062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626698375629013</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626698375629013</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1138</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1138</min_tcp_pkts><max_tcp_pkts>1138</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="620"><ip.session_id>312</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601057052612305</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.16307830810546875</time_between_pkts_sum><time_between_pkts_avg>0.16307830810546875</time_between_pkts_avg><time_between_pkts_max>0.16307830810546875</time_between_pkts_max><time_between_pkts_min>0.16307830810546875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626477930364164</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626477930364164</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="621"><ip.session_id>312</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60106897354126</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.011920928955078125</time_between_pkts_max><time_between_pkts_min>0.011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626461816272086</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626461816272086</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>16018</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>16018</min_tcp_pkts><max_tcp_pkts>16018</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="622"><ip.session_id>313</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60109806060791</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.029087066650390625</time_between_pkts_sum><time_between_pkts_avg>0.029087066650390625</time_between_pkts_avg><time_between_pkts_max>0.029087066650390625</time_between_pkts_max><time_between_pkts_min>0.029087066650390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626422498074877</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626422498074877</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="623"><ip.session_id>313</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601104021072388</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626414441100083</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626414441100083</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6003</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6003</min_tcp_pkts><max_tcp_pkts>6003</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="624"><ip.session_id>314</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601139068603516</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03504753112792969</time_between_pkts_sum><time_between_pkts_avg>0.03504753112792969</time_between_pkts_avg><time_between_pkts_max>0.03504753112792969</time_between_pkts_max><time_between_pkts_min>0.03504753112792969</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626367066314164</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626367066314164</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="625"><ip.session_id>314</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601146936416626</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626356431211206</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626356431211206</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3</min_tcp_pkts><max_tcp_pkts>3</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="626"><ip.session_id>315</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601151943206787</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626349663428544</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626349663428544</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="627"><ip.session_id>315</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60115909576416</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626339995181267</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626339995181267</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5560</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5560</min_tcp_pkts><max_tcp_pkts>5560</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="628"><ip.session_id>316</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601151943206787</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626349663428544</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626349663428544</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="629"><ip.session_id>316</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601164102554321</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626333227417741</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626333227417741</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1272</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1272</min_tcp_pkts><max_tcp_pkts>1272</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="630"><ip.session_id>317</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60117793083191</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.013828277587890625</time_between_pkts_sum><time_between_pkts_avg>0.013828277587890625</time_between_pkts_avg><time_between_pkts_max>0.013828277587890625</time_between_pkts_max><time_between_pkts_min>0.013828277587890625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626314535540362</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626314535540362</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="631"><ip.session_id>317</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601208925247192</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.030994415283203125</time_between_pkts_max><time_between_pkts_min>0.030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162627264017146</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162627264017146</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>70</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>70</min_tcp_pkts><max_tcp_pkts>70</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="632"><ip.session_id>318</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60117793083191</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626314535540362</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626314535540362</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="633"><ip.session_id>318</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601233005523682</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.024080276489257812</time_between_pkts_sum><time_between_pkts_avg>0.024080276489257812</time_between_pkts_avg><time_between_pkts_max>0.024080276489257812</time_between_pkts_max><time_between_pkts_min>0.024080276489257812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626240090900962</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626240090900962</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1175</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1175</min_tcp_pkts><max_tcp_pkts>1175</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="634"><ip.session_id>319</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60117793083191</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626314535540362</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626314535540362</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="635"><ip.session_id>319</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601241111755371</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626229133761797</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626229133761797</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1001</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1001</min_tcp_pkts><max_tcp_pkts>1001</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="636"><ip.session_id>320</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60117793083191</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626314535540362</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626314535540362</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="637"><ip.session_id>320</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601248025894165</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626219787982947</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626219787982947</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2323</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2323</min_tcp_pkts><max_tcp_pkts>2323</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="638"><ip.session_id>321</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601282119750977</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03409385681152344</time_between_pkts_sum><time_between_pkts_avg>0.03409385681152344</time_between_pkts_avg><time_between_pkts_max>0.03409385681152344</time_between_pkts_max><time_between_pkts_min>0.03409385681152344</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626173703844886</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626173703844886</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="639"><ip.session_id>321</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60128903388977</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626164358155151</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626164358155151</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>49159</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>49159</min_tcp_pkts><max_tcp_pkts>49159</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="640"><ip.session_id>322</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601382970809937</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.09393692016601562</time_between_pkts_sum><time_between_pkts_avg>0.09393692016601562</time_between_pkts_avg><time_between_pkts_max>0.09393692016601562</time_between_pkts_max><time_between_pkts_min>0.09393692016601562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626037387169572</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626037387169572</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="641"><ip.session_id>322</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601392030715942</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162602514138359</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162602514138359</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6789</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6789</min_tcp_pkts><max_tcp_pkts>6789</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="642"><ip.session_id>323</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601382970809937</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626037387169572</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626037387169572</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="643"><ip.session_id>323</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60139799118042</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11626017084959514</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11626017084959514</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2607</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2607</min_tcp_pkts><max_tcp_pkts>2607</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="644"><ip.session_id>324</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601428985595703</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.030994415283203125</time_between_pkts_max><time_between_pkts_min>0.030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625975191734303</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625975191734303</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="645"><ip.session_id>324</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601462125778198</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03314018249511719</time_between_pkts_sum><time_between_pkts_avg>0.03314018249511719</time_between_pkts_avg><time_between_pkts_max>0.03314018249511719</time_between_pkts_max><time_between_pkts_min>0.03314018249511719</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625930398542877</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625930398542877</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>49160</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>49160</min_tcp_pkts><max_tcp_pkts>49160</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="646"><ip.session_id>325</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601428985595703</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625975191734303</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625975191734303</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="647"><ip.session_id>325</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601473093032837</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625915574972809</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625915574972809</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8222</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8222</min_tcp_pkts><max_tcp_pkts>8222</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="648"><ip.session_id>326</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601428985595703</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625975191734303</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625975191734303</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="649"><ip.session_id>326</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60148000717163</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625906229698063</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625906229698063</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>50002</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>50002</min_tcp_pkts><max_tcp_pkts>50002</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="650"><ip.session_id>327</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601428985595703</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625975191734303</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625975191734303</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="651"><ip.session_id>327</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601499080657959</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.019073486328125</time_between_pkts_sum><time_between_pkts_avg>0.019073486328125</time_between_pkts_avg><time_between_pkts_max>0.019073486328125</time_between_pkts_max><time_between_pkts_min>0.019073486328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625880449707686</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625880449707686</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>31038</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>31038</min_tcp_pkts><max_tcp_pkts>31038</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="652"><ip.session_id>328</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601511001586914</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.011920928955078125</time_between_pkts_max><time_between_pkts_min>0.011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162586433727176</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162586433727176</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="653"><ip.session_id>328</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60152792930603</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.016927719116210938</time_between_pkts_sum><time_between_pkts_avg>0.016927719116210938</time_between_pkts_avg><time_between_pkts_max>0.016927719116210938</time_between_pkts_max><time_between_pkts_min>0.016927719116210938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625841457689481</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625841457689481</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7777</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7777</min_tcp_pkts><max_tcp_pkts>7777</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="654"><ip.session_id>329</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601511001586914</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162586433727176</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162586433727176</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="655"><ip.session_id>329</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601535081863403</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625831790287414</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625831790287414</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5225</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5225</min_tcp_pkts><max_tcp_pkts>5225</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="656"><ip.session_id>330</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601511001586914</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162586433727176</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162586433727176</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="657"><ip.session_id>330</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601540088653564</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625825023115532</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625825023115532</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9666</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9666</min_tcp_pkts><max_tcp_pkts>9666</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="658"><ip.session_id>331</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601511001586914</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162586433727176</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162586433727176</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="659"><ip.session_id>331</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601542949676514</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625821156163708</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625821156163708</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32771</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32771</min_tcp_pkts><max_tcp_pkts>32771</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="660"><ip.session_id>332</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601511001586914</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162586433727176</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162586433727176</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="661"><ip.session_id>332</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601548910140991</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625813100022338</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625813100022338</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>700</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>700</min_tcp_pkts><max_tcp_pkts>700</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="662"><ip.session_id>333</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601511001586914</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162586433727176</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162586433727176</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="663"><ip.session_id>333</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60155200958252</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625808910833238</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625808910833238</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2010</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2010</min_tcp_pkts><max_tcp_pkts>2010</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="664"><ip.session_id>334</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601511001586914</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162586433727176</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162586433727176</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="665"><ip.session_id>334</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601555109024048</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625804721647157</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625804721647157</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1107</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1107</min_tcp_pkts><max_tcp_pkts>1107</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="666"><ip.session_id>335</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601511001586914</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162586433727176</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162586433727176</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="667"><ip.session_id>335</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601558923721313</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162579956572997</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162579956572997</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5033</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5033</min_tcp_pkts><max_tcp_pkts>5033</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="668"><ip.session_id>336</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601572036743164</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.013113021850585938</time_between_pkts_sum><time_between_pkts_avg>0.013113021850585938</time_between_pkts_avg><time_between_pkts_max>0.013113021850585938</time_between_pkts_max><time_between_pkts_min>0.013113021850585938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625781842299522</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625781842299522</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="669"><ip.session_id>336</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601577043533325</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625775075185789</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625775075185789</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>749</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>749</min_tcp_pkts><max_tcp_pkts>749</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="670"><ip.session_id>337</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601607084274292</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030040740966796875</time_between_pkts_sum><time_between_pkts_avg>0.030040740966796875</time_between_pkts_avg><time_between_pkts_max>0.030040740966796875</time_between_pkts_max><time_between_pkts_min>0.030040740966796875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625734472668824</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625734472668824</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="671"><ip.session_id>337</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601614952087402</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162572383872315</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162572383872315</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4006</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4006</min_tcp_pkts><max_tcp_pkts>4006</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="672"><ip.session_id>338</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601607084274292</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625734472668824</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625734472668824</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="673"><ip.session_id>338</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601622104644775</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625714171516692</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625714171516692</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>49157</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>49157</min_tcp_pkts><max_tcp_pkts>49157</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="674"><ip.session_id>339</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601721048355103</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.09894371032714844</time_between_pkts_sum><time_between_pkts_avg>0.09894371032714844</time_between_pkts_avg><time_between_pkts_max>0.09894371032714844</time_between_pkts_max><time_between_pkts_min>0.09894371032714844</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625580443476818</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625580443476818</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="675"><ip.session_id>339</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601727962493896</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625571098740843</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625571098740843</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>444</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>444</min_tcp_pkts><max_tcp_pkts>444</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="676"><ip.session_id>340</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601736068725586</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625560142862623</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625560142862623</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="677"><ip.session_id>340</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60174298286438</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625550798159283</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625550798159283</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5922</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5922</min_tcp_pkts><max_tcp_pkts>5922</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="678"><ip.session_id>341</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601736068725586</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625560142862623</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625560142862623</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="679"><ip.session_id>341</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601768016815186</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025033950805664062</time_between_pkts_sum><time_between_pkts_avg>0.025033950805664062</time_between_pkts_avg><time_between_pkts_max>0.025033950805664062</time_between_pkts_max><time_between_pkts_min>0.025033950805664062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625516964014232</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625516964014232</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7106</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7106</min_tcp_pkts><max_tcp_pkts>7106</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="680"><ip.session_id>342</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601814031600952</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04601478576660156</time_between_pkts_sum><time_between_pkts_avg>0.04601478576660156</time_between_pkts_avg><time_between_pkts_max>0.04601478576660156</time_between_pkts_max><time_between_pkts_min>0.04601478576660156</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625454774147007</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625454774147007</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="681"><ip.session_id>342</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601840019226074</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625419651666251</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625419651666251</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3551</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3551</min_tcp_pkts><max_tcp_pkts>3551</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="682"><ip.session_id>343</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601814031600952</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625454774147007</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625454774147007</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="683"><ip.session_id>343</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601855039596558</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015020370483398438</time_between_pkts_sum><time_between_pkts_avg>0.015020370483398438</time_between_pkts_avg><time_between_pkts_max>0.015020370483398438</time_between_pkts_max><time_between_pkts_min>0.015020370483398438</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.116253993516136</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.116253993516136</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>18101</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>18101</min_tcp_pkts><max_tcp_pkts>18101</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="684"><ip.session_id>344</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601859092712402</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625393873833761</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625393873833761</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="685"><ip.session_id>344</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601866960525513</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625383240511164</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625383240511164</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>417</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>417</min_tcp_pkts><max_tcp_pkts>417</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="686"><ip.session_id>345</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601871013641357</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625377762746508</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625377762746508</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="687"><ip.session_id>345</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60188913345337</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.01811981201171875</time_between_pkts_sum><time_between_pkts_avg>0.01811981201171875</time_between_pkts_avg><time_between_pkts_max>0.01811981201171875</time_between_pkts_max><time_between_pkts_min>0.01811981201171875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625353273979407</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625353273979407</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4224</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4224</min_tcp_pkts><max_tcp_pkts>4224</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="688"><ip.session_id>346</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60189700126648</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625342640731079</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625342640731079</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="689"><ip.session_id>346</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601907014846802</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625329107534067</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625329107534067</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3517</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3517</min_tcp_pkts><max_tcp_pkts>3517</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="690"><ip.session_id>347</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60189700126648</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625342640731079</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625342640731079</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="691"><ip.session_id>347</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60191297531128</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625321052074615</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625321052074615</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>808</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>808</min_tcp_pkts><max_tcp_pkts>808</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="692"><ip.session_id>348</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60189700126648</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625342640731079</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625342640731079</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="693"><ip.session_id>348</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601916074752808</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625316863240111</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625316863240111</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5226</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5226</min_tcp_pkts><max_tcp_pkts>5226</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="694"><ip.session_id>349</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60189700126648</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625342640731079</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625342640731079</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="695"><ip.session_id>349</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601921081542969</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625310096667675</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625310096667675</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>13</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>13</min_tcp_pkts><max_tcp_pkts>13</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="696"><ip.session_id>350</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601943016052246</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02193450927734375</time_between_pkts_sum><time_between_pkts_avg>0.02193450927734375</time_between_pkts_avg><time_between_pkts_max>0.02193450927734375</time_between_pkts_max><time_between_pkts_min>0.02193450927734375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625280452728894</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625280452728894</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="697"><ip.session_id>350</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60194993019104</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625271108475181</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625271108475181</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>13722</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>13722</min_tcp_pkts><max_tcp_pkts>13722</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="698"><ip.session_id>351</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601943016052246</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625280452728894</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625280452728894</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="699"><ip.session_id>351</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601957082748413</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625261442021631</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625261442021631</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3168</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3168</min_tcp_pkts><max_tcp_pkts>3168</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="700"><ip.session_id>352</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601943016052246</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625280452728894</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625280452728894</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="701"><ip.session_id>352</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.601959943771362</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11625257575444713</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11625257575444713</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>705</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>705</min_tcp_pkts><max_tcp_pkts>705</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="702"><ip.session_id>353</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60216999053955</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.21004676818847656</time_between_pkts_sum><time_between_pkts_avg>0.21004676818847656</time_between_pkts_avg><time_between_pkts_max>0.21004676818847656</time_between_pkts_max><time_between_pkts_min>0.21004676818847656</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162497371128186</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162497371128186</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="703"><ip.session_id>353</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602177143096924</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624964045322876</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624964045322876</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9090</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9090</min_tcp_pkts><max_tcp_pkts>9090</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="704"><ip.session_id>354</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602181911468506</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00476837158203125</time_between_pkts_sum><time_between_pkts_avg>0.00476837158203125</time_between_pkts_avg><time_between_pkts_max>0.00476837158203125</time_between_pkts_max><time_between_pkts_min>0.00476837158203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624957601359151</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624957601359151</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="705"><ip.session_id>354</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602186918258667</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624950835204928</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624950835204928</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>646</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>646</min_tcp_pkts><max_tcp_pkts>646</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="706"><ip.session_id>355</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602205991744995</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.019073486328125</time_between_pkts_sum><time_between_pkts_avg>0.019073486328125</time_between_pkts_avg><time_between_pkts_max>0.019073486328125</time_between_pkts_max><time_between_pkts_min>0.019073486328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624925059451473</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624925059451473</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="707"><ip.session_id>355</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602211952209473</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624917004551959</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624917004551959</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32775</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32775</min_tcp_pkts><max_tcp_pkts>32775</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="708"><ip.session_id>356</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60222601890564</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014066696166992188</time_between_pkts_sum><time_between_pkts_avg>0.014066696166992188</time_between_pkts_avg><time_between_pkts_max>0.014066696166992188</time_between_pkts_max><time_between_pkts_min>0.014066696166992188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624897995033363</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624897995033363</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="709"><ip.session_id>356</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602232933044434</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162488865139447</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162488865139447</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>27355</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>27355</min_tcp_pkts><max_tcp_pkts>27355</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="710"><ip.session_id>357</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60222601890564</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624897995033363</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624897995033363</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="711"><ip.session_id>357</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60223913192749</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162488027435168</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162488027435168</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3260</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3260</min_tcp_pkts><max_tcp_pkts>3260</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="712"><ip.session_id>358</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602245092391968</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624872219514229</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624872219514229</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="713"><ip.session_id>358</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602249145507812</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624866742231138</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624866742231138</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4343</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4343</min_tcp_pkts><max_tcp_pkts>4343</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="714"><ip.session_id>359</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602273941040039</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0247955322265625</time_between_pkts_sum><time_between_pkts_avg>0.0247955322265625</time_between_pkts_avg><time_between_pkts_max>0.0247955322265625</time_between_pkts_max><time_between_pkts_min>0.0247955322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624833234258722</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624833234258722</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="715"><ip.session_id>359</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602296113967896</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.022172927856445312</time_between_pkts_sum><time_between_pkts_avg>0.022172927856445312</time_between_pkts_avg><time_between_pkts_max>0.022172927856445312</time_between_pkts_max><time_between_pkts_min>0.022172927856445312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624803270562376</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624803270562376</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8100</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8100</min_tcp_pkts><max_tcp_pkts>8100</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="716"><ip.session_id>360</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602302074432373</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624795215831635</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624795215831635</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="717"><ip.session_id>360</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602309942245483</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162478458360415</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162478458360415</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1010</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1010</min_tcp_pkts><max_tcp_pkts>1010</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="718"><ip.session_id>361</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602302074432373</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624795215831635</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624795215831635</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="719"><ip.session_id>361</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602314949035645</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624777817651331</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624777817651331</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1972</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1972</min_tcp_pkts><max_tcp_pkts>1972</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="720"><ip.session_id>362</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602328062057495</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.013113021850585938</time_between_pkts_sum><time_between_pkts_avg>0.013113021850585938</time_between_pkts_avg><time_between_pkts_max>0.013113021850585938</time_between_pkts_max><time_between_pkts_min>0.013113021850585938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624760097336036</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624760097336036</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="721"><ip.session_id>362</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602333068847656</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162475333141172</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162475333141172</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3826</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3826</min_tcp_pkts><max_tcp_pkts>3826</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="722"><ip.session_id>363</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602358102798462</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025033950805664062</time_between_pkts_sum><time_between_pkts_avg>0.025033950805664062</time_between_pkts_avg><time_between_pkts_max>0.025033950805664062</time_between_pkts_max><time_between_pkts_min>0.025033950805664062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162471950190828</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162471950190828</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="723"><ip.session_id>363</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602366924285889</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624707581082556</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624707581082556</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6100</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6100</min_tcp_pkts><max_tcp_pkts>6100</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="724"><ip.session_id>364</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602358102798462</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162471950190828</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162471950190828</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="725"><ip.session_id>364</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602373123168945</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624699204300727</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624699204300727</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1183</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1183</min_tcp_pkts><max_tcp_pkts>1183</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="726"><ip.session_id>365</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602375030517578</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0019073486328125</time_between_pkts_sum><time_between_pkts_avg>0.0019073486328125</time_between_pkts_avg><time_between_pkts_max>0.0019073486328125</time_between_pkts_max><time_between_pkts_min>0.0019073486328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624696626831824</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624696626831824</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="727"><ip.session_id>365</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60238003730774</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624689860981391</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624689860981391</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1914</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1914</min_tcp_pkts><max_tcp_pkts>1914</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="728"><ip.session_id>366</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60240912437439</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.029087066650390625</time_between_pkts_sum><time_between_pkts_avg>0.029087066650390625</time_between_pkts_avg><time_between_pkts_max>0.029087066650390625</time_between_pkts_max><time_between_pkts_min>0.029087066650390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624650554767994</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624650554767994</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="729"><ip.session_id>366</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602431058883667</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02193450927734375</time_between_pkts_sum><time_between_pkts_avg>0.02193450927734375</time_between_pkts_avg><time_between_pkts_max>0.02193450927734375</time_between_pkts_max><time_between_pkts_min>0.02193450927734375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624620914192708</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624620914192708</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>15000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>15000</min_tcp_pkts><max_tcp_pkts>15000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="730"><ip.session_id>367</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60240912437439</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624650554767994</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624650554767994</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="731"><ip.session_id>367</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602457046508789</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162458579675023</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162458579675023</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1600</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1600</min_tcp_pkts><max_tcp_pkts>1600</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="732"><ip.session_id>368</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60246992111206</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.012874603271484375</time_between_pkts_sum><time_between_pkts_avg>0.012874603271484375</time_between_pkts_avg><time_between_pkts_max>0.012874603271484375</time_between_pkts_max><time_between_pkts_min>0.012874603271484375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162456839919677</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162456839919677</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="733"><ip.session_id>368</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602488994598389</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.017881393432617188</time_between_pkts_sum><time_between_pkts_avg>0.017881393432617188</time_between_pkts_avg><time_between_pkts_max>0.017881393432617188</time_between_pkts_max><time_between_pkts_min>0.017881393432617188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162454262513922</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162454262513922</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1062</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1062</min_tcp_pkts><max_tcp_pkts>1062</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="734"><ip.session_id>369</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602471113204956</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.0011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.0011920928955078125</time_between_pkts_max><time_between_pkts_min>0.0011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624566788314826</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624566788314826</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="735"><ip.session_id>369</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602494955062866</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624534570769673</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624534570769673</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1021</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1021</min_tcp_pkts><max_tcp_pkts>1021</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="736"><ip.session_id>370</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602471113204956</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624566788314826</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624566788314826</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="737"><ip.session_id>370</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602498054504395</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624530382501921</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624530382501921</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3369</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3369</min_tcp_pkts><max_tcp_pkts>3369</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="738"><ip.session_id>371</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602471113204956</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624566788314826</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624566788314826</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="739"><ip.session_id>371</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.6025071144104</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162451813989041</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162451813989041</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1075</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1075</min_tcp_pkts><max_tcp_pkts>1075</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="740"><ip.session_id>372</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602471113204956</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624566788314826</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624566788314826</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="741"><ip.session_id>372</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60250997543335</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162451427380792</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162451427380792</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1087</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1087</min_tcp_pkts><max_tcp_pkts>1087</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="742"><ip.session_id>373</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602471113204956</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624566788314826</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624566788314826</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="743"><ip.session_id>373</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602515935897827</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624506219477664</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624506219477664</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>40911</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>40911</min_tcp_pkts><max_tcp_pkts>40911</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="744"><ip.session_id>374</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602471113204956</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624566788314826</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624566788314826</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="745"><ip.session_id>374</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602535963058472</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02002716064453125</time_between_pkts_sum><time_between_pkts_avg>0.02002716064453125</time_between_pkts_avg><time_between_pkts_max>0.02002716064453125</time_between_pkts_max><time_between_pkts_min>0.02002716064453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162447915700975</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162447915700975</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>13783</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>13783</min_tcp_pkts><max_tcp_pkts>13783</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="746"><ip.session_id>375</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602471113204956</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624566788314826</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624566788314826</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="747"><ip.session_id>375</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602540969848633</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162447239141246</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162447239141246</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4005</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4005</min_tcp_pkts><max_tcp_pkts>4005</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="748"><ip.session_id>376</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602611064910889</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.07009506225585938</time_between_pkts_sum><time_between_pkts_avg>0.07009506225585938</time_between_pkts_avg><time_between_pkts_max>0.07009506225585938</time_between_pkts_max><time_between_pkts_min>0.07009506225585938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624377673877305</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624377673877305</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="749"><ip.session_id>376</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602617979049683</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162436833107482</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162436833107482</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1040</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1040</min_tcp_pkts><max_tcp_pkts>1040</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="750"><ip.session_id>377</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602659940719604</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.041961669921875</time_between_pkts_sum><time_between_pkts_avg>0.041961669921875</time_between_pkts_avg><time_between_pkts_max>0.041961669921875</time_between_pkts_max><time_between_pkts_min>0.041961669921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624311630250851</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624311630250851</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="751"><ip.session_id>377</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602668046951294</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624300676746335</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624300676746335</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>514</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>514</min_tcp_pkts><max_tcp_pkts>514</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="752"><ip.session_id>378</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602659940719604</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624311630250851</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624311630250851</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="753"><ip.session_id>378</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602674007415771</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624292622712067</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624292622712067</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>912</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>912</min_tcp_pkts><max_tcp_pkts>912</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="754"><ip.session_id>379</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.60270094871521</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.026941299438476562</time_between_pkts_sum><time_between_pkts_avg>0.026941299438476562</time_between_pkts_avg><time_between_pkts_max>0.026941299438476562</time_between_pkts_max><time_between_pkts_min>0.026941299438476562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624256218616402</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624256218616402</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="755"><ip.session_id>379</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602707147598267</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624247842485065</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624247842485065</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>28201</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>28201</min_tcp_pkts><max_tcp_pkts>28201</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="756"><ip.session_id>380</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602721929550171</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014781951904296875</time_between_pkts_sum><time_between_pkts_avg>0.014781951904296875</time_between_pkts_avg><time_between_pkts_max>0.014781951904296875</time_between_pkts_max><time_between_pkts_min>0.014781951904296875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162422786868213</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162422786868213</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="757"><ip.session_id>380</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602725982666016</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624222392006218</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624222392006218</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8011</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8011</min_tcp_pkts><max_tcp_pkts>8011</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="758"><ip.session_id>381</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602735042572021</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1162421015004343</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1162421015004343</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="759"><ip.session_id>381</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602739095687866</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624204673384216</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624204673384216</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1900</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1900</min_tcp_pkts><max_tcp_pkts>1900</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="760"><ip.session_id>382</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602769136428833</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030040740966796875</time_between_pkts_sum><time_between_pkts_avg>0.030040740966796875</time_between_pkts_avg><time_between_pkts_max>0.030040740966796875</time_between_pkts_max><time_between_pkts_min>0.030040740966796875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624164081835611</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624164081835611</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="761"><ip.session_id>382</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.602774143218994</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11624157316605072</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11624157316605072</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1501</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1501</min_tcp_pkts><max_tcp_pkts>1501</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="762"><ip.session_id>383</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640480041503906</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>37.70589828491211</time_between_pkts_sum><time_between_pkts_avg>37.70589828491211</time_between_pkts_avg><time_between_pkts_max>37.70589828491211</time_between_pkts_max><time_between_pkts_min>37.70589828491211</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573431050087195</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573431050087195</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="763"><ip.session_id>383</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640517950057983</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03790855407714844</time_between_pkts_sum><time_between_pkts_avg>0.03790855407714844</time_between_pkts_avg><time_between_pkts_max>0.03790855407714844</time_between_pkts_max><time_between_pkts_min>0.03790855407714844</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573380273960189</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573380273960189</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32780</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32780</min_tcp_pkts><max_tcp_pkts>32780</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="764"><ip.session_id>384</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640531063079834</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.013113021850585938</time_between_pkts_sum><time_between_pkts_avg>0.013113021850585938</time_between_pkts_avg><time_between_pkts_max>0.013113021850585938</time_between_pkts_max><time_between_pkts_min>0.013113021850585938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573362709994814</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573362709994814</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="765"><ip.session_id>384</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640541076660156</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573349297548062</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573349297548062</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1248</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1248</min_tcp_pkts><max_tcp_pkts>1248</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="766"><ip.session_id>385</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64053201675415</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573361432617593</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573361432617593</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="767"><ip.session_id>385</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640546083450317</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573342591336344</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573342591336344</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2222</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2222</min_tcp_pkts><max_tcp_pkts>2222</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="768"><ip.session_id>386</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640552997589111</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573333330390083</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573333330390083</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="769"><ip.session_id>386</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640558004379272</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573326624196868</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573326624196868</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>481</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>481</min_tcp_pkts><max_tcp_pkts>481</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="770"><ip.session_id>387</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640680074691772</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.1220703125</time_between_pkts_sum><time_between_pkts_avg>0.1220703125</time_between_pkts_avg><time_between_pkts_max>0.1220703125</time_between_pkts_max><time_between_pkts_min>0.1220703125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573163123224091</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573163123224091</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="771"><ip.session_id>387</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640692949295044</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.012874603271484375</time_between_pkts_sum><time_between_pkts_avg>0.012874603271484375</time_between_pkts_avg><time_between_pkts_max>0.012874603271484375</time_between_pkts_max><time_between_pkts_min>0.012874603271484375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573145879250177</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573145879250177</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1148</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1148</min_tcp_pkts><max_tcp_pkts>1148</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="772"><ip.session_id>388</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640707015991211</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014066696166992188</time_between_pkts_sum><time_between_pkts_avg>0.014066696166992188</time_between_pkts_avg><time_between_pkts_max>0.014066696166992188</time_between_pkts_max><time_between_pkts_min>0.014066696166992188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573127038670758</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573127038670758</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="773"><ip.session_id>388</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640743970870972</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03695487976074219</time_between_pkts_sum><time_between_pkts_avg>0.03695487976074219</time_between_pkts_avg><time_between_pkts_max>0.03695487976074219</time_between_pkts_max><time_between_pkts_min>0.03695487976074219</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573077542525563</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573077542525563</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5357</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5357</min_tcp_pkts><max_tcp_pkts>5357</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="774"><ip.session_id>389</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640758037567139</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014066696166992188</time_between_pkts_sum><time_between_pkts_avg>0.014066696166992188</time_between_pkts_avg><time_between_pkts_max>0.014066696166992188</time_between_pkts_max><time_between_pkts_min>0.014066696166992188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573058702168641</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573058702168641</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="775"><ip.session_id>389</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.6407790184021</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573030601411277</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573030601411277</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10004</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10004</min_tcp_pkts><max_tcp_pkts>10004</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="776"><ip.session_id>390</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640758037567139</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573058702168641</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573058702168641</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="777"><ip.session_id>390</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640784978866577</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573022618266463</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573022618266463</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2301</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2301</min_tcp_pkts><max_tcp_pkts>2301</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="778"><ip.session_id>391</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640758037567139</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573058702168641</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573058702168641</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="779"><ip.session_id>391</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640789985656738</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1157301591243333</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1157301591243333</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6580</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6580</min_tcp_pkts><max_tcp_pkts>6580</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="780"><ip.session_id>392</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640758037567139</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573058702168641</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573058702168641</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="781"><ip.session_id>392</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640794038772583</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573010483907438</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573010483907438</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2800</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2800</min_tcp_pkts><max_tcp_pkts>2800</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="782"><ip.session_id>393</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640758037567139</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573058702168641</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573058702168641</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="783"><ip.session_id>393</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640799045562744</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573003778088367</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573003778088367</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1121</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1121</min_tcp_pkts><max_tcp_pkts>1121</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="784"><ip.session_id>394</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640758037567139</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573058702168641</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573058702168641</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="785"><ip.session_id>394</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640802145004272</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572999626870932</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572999626870932</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3945</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3945</min_tcp_pkts><max_tcp_pkts>3945</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="786"><ip.session_id>395</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640758037567139</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11573058702168641</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11573058702168641</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="787"><ip.session_id>395</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640805006027222</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572995794980559</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572995794980559</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4129</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4129</min_tcp_pkts><max_tcp_pkts>4129</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="788"><ip.session_id>396</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640813112258911</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572984937971613</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572984937971613</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="789"><ip.session_id>396</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640825033187866</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.011920928955078125</time_between_pkts_max><time_between_pkts_min>0.011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572968971818993</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572968971818993</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7435</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7435</min_tcp_pkts><max_tcp_pkts>7435</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="790"><ip.session_id>397</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640813112258911</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572984937971613</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572984937971613</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="791"><ip.session_id>397</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640867948532104</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04291534423828125</time_between_pkts_sum><time_between_pkts_avg>0.04291534423828125</time_between_pkts_avg><time_between_pkts_max>0.04291534423828125</time_between_pkts_max><time_between_pkts_min>0.04291534423828125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572911494034326</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572911494034326</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5925</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5925</min_tcp_pkts><max_tcp_pkts>5925</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="792"><ip.session_id>398</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640813112258911</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572984937971613</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572984937971613</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="793"><ip.session_id>398</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640876054763794</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572900637183552</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572900637183552</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8010</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8010</min_tcp_pkts><max_tcp_pkts>8010</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="794"><ip.session_id>399</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640813112258911</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572984937971613</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572984937971613</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="795"><ip.session_id>399</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640881061553955</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572893931491778</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572893931491778</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>12000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>12000</min_tcp_pkts><max_tcp_pkts>12000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="796"><ip.session_id>400</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640813112258911</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572984937971613</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572984937971613</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="797"><ip.session_id>400</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640883922576904</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572890099671397</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572890099671397</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5902</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5902</min_tcp_pkts><max_tcp_pkts>5902</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="798"><ip.session_id>401</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640813112258911</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572984937971613</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572984937971613</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="799"><ip.session_id>401</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640887975692749</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572884671263534</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572884671263534</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>60443</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>60443</min_tcp_pkts><max_tcp_pkts>60443</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="800"><ip.session_id>402</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64089298248291</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572877965590263</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572877965590263</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="801"><ip.session_id>402</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640902996063232</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572864554267034</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572864554267034</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>783</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>783</min_tcp_pkts><max_tcp_pkts>783</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="802"><ip.session_id>403</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64089298248291</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572877965590263</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572877965590263</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="803"><ip.session_id>403</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64090895652771</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572856571351299</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572856571351299</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9200</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9200</min_tcp_pkts><max_tcp_pkts>9200</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="804"><ip.session_id>404</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64089298248291</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572877965590263</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572877965590263</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="805"><ip.session_id>404</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640912055969238</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572852420239468</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572852420239468</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6101</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6101</min_tcp_pkts><max_tcp_pkts>6101</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="806"><ip.session_id>405</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640893936157227</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572876688320045</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572876688320045</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="807"><ip.session_id>405</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640918016433716</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572844437340472</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572844437340472</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9898</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9898</min_tcp_pkts><max_tcp_pkts>9898</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="808"><ip.session_id>406</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640919923782349</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0019073486328125</time_between_pkts_sum><time_between_pkts_avg>0.0019073486328125</time_between_pkts_avg><time_between_pkts_max>0.0019073486328125</time_between_pkts_max><time_between_pkts_min>0.0019073486328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1157284188281512</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1157284188281512</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="809"><ip.session_id>406</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640941143035889</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.021219253540039062</time_between_pkts_sum><time_between_pkts_avg>0.021219253540039062</time_between_pkts_avg><time_between_pkts_max>0.021219253540039062</time_between_pkts_max><time_between_pkts_min>0.021219253540039062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572813463796633</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572813463796633</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3333</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3333</min_tcp_pkts><max_tcp_pkts>3333</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="810"><ip.session_id>407</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640964984893799</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02384185791015625</time_between_pkts_sum><time_between_pkts_avg>0.02384185791015625</time_between_pkts_avg><time_between_pkts_max>0.02384185791015625</time_between_pkts_max><time_between_pkts_min>0.02384185791015625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572781532481703</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572781532481703</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="811"><ip.session_id>407</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640973091125488</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572770675874768</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572770675874768</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>55055</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>55055</min_tcp_pkts><max_tcp_pkts>55055</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="812"><ip.session_id>408</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640964984893799</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572781532481703</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572781532481703</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="813"><ip.session_id>408</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640979051589966</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572762693088545</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572762693088545</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5963</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5963</min_tcp_pkts><max_tcp_pkts>5963</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="814"><ip.session_id>409</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64098310470581</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572757264800206</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572757264800206</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="815"><ip.session_id>409</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640990018844604</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572748004790671</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572748004790671</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5911</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5911</min_tcp_pkts><max_tcp_pkts>5911</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="816"><ip.session_id>410</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64098310470581</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572757264800206</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572757264800206</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="817"><ip.session_id>410</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.640995025634766</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572741299275777</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572741299275777</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7443</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7443</min_tcp_pkts><max_tcp_pkts>7443</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="818"><ip.session_id>411</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64098310470581</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572757264800206</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572757264800206</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="819"><ip.session_id>411</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64099907875061</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572735871007506</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572735871007506</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6000</min_tcp_pkts><max_tcp_pkts>6000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="820"><ip.session_id>412</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64102292060852</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02384185791015625</time_between_pkts_sum><time_between_pkts_avg>0.02384185791015625</time_between_pkts_avg><time_between_pkts_max>0.02384185791015625</time_between_pkts_max><time_between_pkts_min>0.02384185791015625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572703940120757</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572703940120757</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="821"><ip.session_id>412</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64103102684021</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572693083659402</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572693083659402</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>55056</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>55056</min_tcp_pkts><max_tcp_pkts>55056</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="822"><ip.session_id>413</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64102292060852</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572703940120757</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572703940120757</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="823"><ip.session_id>413</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.6410551071167</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.024080276489257812</time_between_pkts_sum><time_between_pkts_avg>0.024080276489257812</time_between_pkts_avg><time_between_pkts_max>0.024080276489257812</time_between_pkts_max><time_between_pkts_min>0.024080276489257812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1157266083370315</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1157266083370315</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1009</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1009</min_tcp_pkts><max_tcp_pkts>1009</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="824"><ip.session_id>414</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.641063928604126</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572649019407724</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572649019407724</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="825"><ip.session_id>414</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.641071081161499</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1157263944026698</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1157263944026698</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1594</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1594</min_tcp_pkts><max_tcp_pkts>1594</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="826"><ip.session_id>415</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.641063928604126</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572649019407724</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572649019407724</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="827"><ip.session_id>415</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.641077995300293</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572630180446002</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572630180446002</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2998</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2998</min_tcp_pkts><max_tcp_pkts>2998</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="828"><ip.session_id>416</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.641082048416138</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572624752281972</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572624752281972</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="829"><ip.session_id>416</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64111614227295</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03409385681152344</time_between_pkts_sum><time_between_pkts_avg>0.03409385681152344</time_between_pkts_avg><time_between_pkts_max>0.03409385681152344</time_between_pkts_max><time_between_pkts_min>0.03409385681152344</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11572579092044945</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11572579092044945</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2030</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2030</min_tcp_pkts><max_tcp_pkts>2030</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="830"><ip.session_id>417</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642187118530273</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>1.0709762573242188</time_between_pkts_sum><time_between_pkts_avg>1.0709762573242188</time_between_pkts_avg><time_between_pkts_max>1.0709762573242188</time_between_pkts_max><time_between_pkts_min>1.0709762573242188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11571144969261718</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11571144969261718</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="831"><ip.session_id>417</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642194032669067</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1157113571183218</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1157113571183218</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5822</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5822</min_tcp_pkts><max_tcp_pkts>5822</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="832"><ip.session_id>418</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642252922058105</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.05888938903808594</time_between_pkts_sum><time_between_pkts_avg>0.05888938903808594</time_between_pkts_avg><time_between_pkts_max>0.05888938903808594</time_between_pkts_max><time_between_pkts_min>0.05888938903808594</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11571056864670601</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11571056864670601</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="833"><ip.session_id>418</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642261981964111</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11571044734433425</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11571044734433425</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1494</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1494</min_tcp_pkts><max_tcp_pkts>1494</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="834"><ip.session_id>419</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642252922058105</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11571056864670601</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11571056864670601</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="835"><ip.session_id>419</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642269134521484</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11571035157948355</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11571035157948355</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2008</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2008</min_tcp_pkts><max_tcp_pkts>2008</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="836"><ip.session_id>420</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64227294921875</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11571030050496134</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11571030050496134</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="837"><ip.session_id>420</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642277956008911</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11571023346971934</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11571023346971934</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1031</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1031</min_tcp_pkts><max_tcp_pkts>1031</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="838"><ip.session_id>421</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642282009124756</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11571017920315177</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11571017920315177</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="839"><ip.session_id>421</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.6422860622406</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11571012493663509</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11571012493663509</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1271</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1271</min_tcp_pkts><max_tcp_pkts>1271</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="840"><ip.session_id>422</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642306089401245</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02002716064453125</time_between_pkts_sum><time_between_pkts_avg>0.02002716064453125</time_between_pkts_avg><time_between_pkts_max>0.02002716064453125</time_between_pkts_max><time_between_pkts_min>0.02002716064453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11570985679694687</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11570985679694687</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="841"><ip.session_id>422</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642311096191406</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11570978976221899</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11570978976221899</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1277</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1277</min_tcp_pkts><max_tcp_pkts>1277</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="842"><ip.session_id>423</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642317056655884</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1157097099590728</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1157097099590728</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="843"><ip.session_id>423</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642322063446045</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11570964292451505</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11570964292451505</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9998</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9998</min_tcp_pkts><max_tcp_pkts>9998</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="844"><ip.session_id>424</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642375946044922</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.053882598876953125</time_between_pkts_sum><time_between_pkts_avg>0.053882598876953125</time_between_pkts_avg><time_between_pkts_max>0.053882598876953125</time_between_pkts_max><time_between_pkts_min>0.053882598876953125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11570892150990467</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11570892150990467</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="845"><ip.session_id>424</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642383098602295</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1157088257475796</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1157088257475796</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2006</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2006</min_tcp_pkts><max_tcp_pkts>2006</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="846"><ip.session_id>425</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64238691329956</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11570877467440438</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11570877467440438</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="847"><ip.session_id>425</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642391920089722</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11570870764093032</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11570870764093032</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6346</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6346</min_tcp_pkts><max_tcp_pkts>6346</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="848"><ip.session_id>426</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642418146133423</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.026226043701171875</time_between_pkts_sum><time_between_pkts_avg>0.026226043701171875</time_between_pkts_avg><time_between_pkts_max>0.026226043701171875</time_between_pkts_max><time_between_pkts_min>0.026226043701171875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11570835651447799</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11570835651447799</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="849"><ip.session_id>426</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.6424241065979</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11570827671330874</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11570827671330874</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>992</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>992</min_tcp_pkts><max_tcp_pkts>992</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="850"><ip.session_id>427</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642452001571655</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.027894973754882812</time_between_pkts_sum><time_between_pkts_avg>0.027894973754882812</time_between_pkts_avg><time_between_pkts_max>0.027894973754882812</time_between_pkts_max><time_between_pkts_min>0.027894973754882812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11570790324529973</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11570790324529973</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="851"><ip.session_id>427</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642457962036133</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11570782344475569</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11570782344475569</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4662</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4662</min_tcp_pkts><max_tcp_pkts>4662</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="852"><ip.session_id>428</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642518043518066</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.06008148193359375</time_between_pkts_sum><time_between_pkts_avg>0.06008148193359375</time_between_pkts_avg><time_between_pkts_max>0.06008148193359375</time_between_pkts_max><time_between_pkts_min>0.06008148193359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11570701906141871</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11570701906141871</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="853"><ip.session_id>428</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642525911331177</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1157069137263337</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1157069137263337</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5801</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5801</min_tcp_pkts><max_tcp_pkts>5801</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="854"><ip.session_id>429</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642571926116943</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04601478576660156</time_between_pkts_sum><time_between_pkts_avg>0.04601478576660156</time_between_pkts_avg><time_between_pkts_max>0.04601478576660156</time_between_pkts_max><time_between_pkts_min>0.04601478576660156</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11570629767952584</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11570629767952584</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="855"><ip.session_id>429</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.642578125</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11570621468926554</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11570621468926554</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>667</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>667</min_tcp_pkts><max_tcp_pkts>667</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="856"><ip.session_id>430</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643041133880615</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.4630088806152344</time_between_pkts_sum><time_between_pkts_avg>0.4630088806152344</time_between_pkts_avg><time_between_pkts_max>0.4630088806152344</time_between_pkts_max><time_between_pkts_min>0.4630088806152344</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11570001629172078</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11570001629172078</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="857"><ip.session_id>430</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643054008483887</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.012874603271484375</time_between_pkts_sum><time_between_pkts_avg>0.012874603271484375</time_between_pkts_avg><time_between_pkts_max>0.012874603271484375</time_between_pkts_max><time_between_pkts_min>0.012874603271484375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569984394618102</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569984394618102</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>15742</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>15742</min_tcp_pkts><max_tcp_pkts>15742</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="858"><ip.session_id>431</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643041133880615</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11570001629172078</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11570001629172078</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="859"><ip.session_id>431</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643062114715576</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569973543258606</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569973543258606</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1328</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1328</min_tcp_pkts><max_tcp_pkts>1328</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="860"><ip.session_id>432</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643065929412842</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569968436743534</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569968436743534</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="861"><ip.session_id>432</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643070936203003</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569961734449342</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569961734449342</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>425</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>425</min_tcp_pkts><max_tcp_pkts>425</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="862"><ip.session_id>433</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643118143081665</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.047206878662109375</time_between_pkts_sum><time_between_pkts_avg>0.047206878662109375</time_between_pkts_avg><time_between_pkts_max>0.047206878662109375</time_between_pkts_max><time_between_pkts_min>0.047206878662109375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569898541771576</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569898541771576</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="863"><ip.session_id>433</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643125057220459</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569889286336323</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569889286336323</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1035</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1035</min_tcp_pkts><max_tcp_pkts>1035</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="864"><ip.session_id>434</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643129110336304</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569883860743231</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569883860743231</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="865"><ip.session_id>434</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64316201210022</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.032901763916015625</time_between_pkts_sum><time_between_pkts_avg>0.032901763916015625</time_between_pkts_avg><time_between_pkts_max>0.032901763916015625</time_between_pkts_max><time_between_pkts_min>0.032901763916015625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569839817881743</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569839817881743</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>555</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>555</min_tcp_pkts><max_tcp_pkts>555</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="866"><ip.session_id>435</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64317011833191</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1156982896679344</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1156982896679344</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="867"><ip.session_id>435</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64317798614502</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569818434874257</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569818434874257</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3878</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3878</min_tcp_pkts><max_tcp_pkts>3878</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="868"><ip.session_id>436</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64317011833191</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1156982896679344</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1156982896679344</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="869"><ip.session_id>436</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643185138702393</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569808860418912</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569808860418912</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1783</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1783</min_tcp_pkts><max_tcp_pkts>1783</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="870"><ip.session_id>437</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643204927444458</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.019788742065429688</time_between_pkts_sum><time_between_pkts_avg>0.019788742065429688</time_between_pkts_avg><time_between_pkts_max>0.019788742065429688</time_between_pkts_max><time_between_pkts_min>0.019788742065429688</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569782371175025</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569782371175025</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="871"><ip.session_id>437</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643213987350464</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569770243609868</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569770243609868</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6006</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6006</min_tcp_pkts><max_tcp_pkts>6006</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="872"><ip.session_id>438</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643204927444458</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569782371175025</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569782371175025</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="873"><ip.session_id>438</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643219947814941</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569762264962447</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569762264962447</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1840</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1840</min_tcp_pkts><max_tcp_pkts>1840</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="874"><ip.session_id>439</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64324402809143</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.024080276489257812</time_between_pkts_sum><time_between_pkts_avg>0.024080276489257812</time_between_pkts_avg><time_between_pkts_max>0.024080276489257812</time_between_pkts_max><time_between_pkts_min>0.024080276489257812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569730031338897</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569730031338897</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="875"><ip.session_id>439</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643249988555908</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569722052746936</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569722052746936</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>33899</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>33899</min_tcp_pkts><max_tcp_pkts>33899</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="876"><ip.session_id>440</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643336057662964</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.08606910705566406</time_between_pkts_sum><time_between_pkts_avg>0.08606910705566406</time_between_pkts_avg><time_between_pkts_max>0.08606910705566406</time_between_pkts_max><time_between_pkts_min>0.08606910705566406</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569606843105738</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569606843105738</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="877"><ip.session_id>440</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643342971801758</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569597588137173</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569597588137173</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2260</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2260</min_tcp_pkts><max_tcp_pkts>2260</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="878"><ip.session_id>441</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64340591430664</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0629425048828125</time_between_pkts_sum><time_between_pkts_avg>0.0629425048828125</time_between_pkts_avg><time_between_pkts_max>0.0629425048828125</time_between_pkts_max><time_between_pkts_min>0.0629425048828125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569513336690473</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569513336690473</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="879"><ip.session_id>441</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643415927886963</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569499933164362</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569499933164362</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2809</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2809</min_tcp_pkts><max_tcp_pkts>2809</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="880"><ip.session_id>442</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64340591430664</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569513336690473</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569513336690473</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="881"><ip.session_id>442</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64342212677002</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569491635759</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569491635759</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8001</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8001</min_tcp_pkts><max_tcp_pkts>8001</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="882"><ip.session_id>443</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643428087234497</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569483657495835</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569483657495835</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="883"><ip.session_id>443</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643435001373291</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1156947440272435</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1156947440272435</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1073</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1073</min_tcp_pkts><max_tcp_pkts>1073</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="884"><ip.session_id>444</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643428087234497</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569483657495835</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569483657495835</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="885"><ip.session_id>444</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643441915512085</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569465147967671</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569465147967671</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1026</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1026</min_tcp_pkts><max_tcp_pkts>1026</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="886"><ip.session_id>445</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64344596862793</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569459722772364</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569459722772364</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="887"><ip.session_id>445</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643451929092407</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569451744553215</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569451744553215</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>119</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>119</min_tcp_pkts><max_tcp_pkts>119</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="888"><ip.session_id>446</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64344596862793</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569459722772364</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569459722772364</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="889"><ip.session_id>446</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643458127975464</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569443447216972</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569443447216972</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>683</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>683</min_tcp_pkts><max_tcp_pkts>683</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="890"><ip.session_id>447</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643481969833374</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02384185791015625</time_between_pkts_sum><time_between_pkts_avg>0.02384185791015625</time_between_pkts_avg><time_between_pkts_max>0.02384185791015625</time_between_pkts_max><time_between_pkts_min>0.02384185791015625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1156941153449618</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1156941153449618</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="891"><ip.session_id>447</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643506050109863</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.024080276489257812</time_between_pkts_sum><time_between_pkts_avg>0.024080276489257812</time_between_pkts_avg><time_between_pkts_max>0.024080276489257812</time_between_pkts_max><time_between_pkts_min>0.024080276489257812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569379302826883</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569379302826883</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1122</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1122</min_tcp_pkts><max_tcp_pkts>1122</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="892"><ip.session_id>448</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643481969833374</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1156941153449618</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1156941153449618</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="893"><ip.session_id>448</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64351201057434</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569371324718647</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569371324718647</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9900</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9900</min_tcp_pkts><max_tcp_pkts>9900</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="894"><ip.session_id>449</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643518924713135</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569362070126878</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569362070126878</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="895"><ip.session_id>449</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643542051315308</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.023126602172851562</time_between_pkts_sum><time_between_pkts_avg>0.023126602172851562</time_between_pkts_avg><time_between_pkts_max>0.023126602172851562</time_between_pkts_max><time_between_pkts_min>0.023126602172851562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569331115220614</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569331115220614</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1124</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1124</min_tcp_pkts><max_tcp_pkts>1124</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="896"><ip.session_id>450</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643518924713135</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569362070126878</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569362070126878</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="897"><ip.session_id>450</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643551111221313</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569318988601461</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569318988601461</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1864</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1864</min_tcp_pkts><max_tcp_pkts>1864</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="898"><ip.session_id>451</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643554925918579</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1156931388266416</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1156931388266416</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="899"><ip.session_id>451</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643561124801636</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11569305585525658</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11569305585525658</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1154</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1154</min_tcp_pkts><max_tcp_pkts>1154</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="900"><ip.session_id>452</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64382791519165</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.26679039001464844</time_between_pkts_sum><time_between_pkts_avg>0.26679039001464844</time_between_pkts_avg><time_between_pkts_max>0.26679039001464844</time_between_pkts_max><time_between_pkts_min>0.26679039001464844</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11568948500727158</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11568948500727158</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="901"><ip.session_id>452</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.643835067749023</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11568938927711564</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11568938927711564</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1056</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1056</min_tcp_pkts><max_tcp_pkts>1056</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="902"><ip.session_id>453</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64457893371582</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.743865966796875</time_between_pkts_sum><time_between_pkts_avg>0.743865966796875</time_between_pkts_avg><time_between_pkts_max>0.743865966796875</time_between_pkts_max><time_between_pkts_min>0.743865966796875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1156794342058435</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1156794342058435</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="903"><ip.session_id>453</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.644593954086304</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015020370483398438</time_between_pkts_sum><time_between_pkts_avg>0.015020370483398438</time_between_pkts_avg><time_between_pkts_max>0.015020370483398438</time_between_pkts_max><time_between_pkts_min>0.015020370483398438</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11567923320762794</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11567923320762794</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>31337</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>31337</min_tcp_pkts><max_tcp_pkts>31337</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="904"><ip.session_id>454</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64457893371582</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1156794342058435</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1156794342058435</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="905"><ip.session_id>454</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64460301399231</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11567911197094674</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11567911197094674</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1213</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1213</min_tcp_pkts><max_tcp_pkts>1213</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="906"><ip.session_id>455</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64457893371582</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1156794342058435</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1156794342058435</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="907"><ip.session_id>455</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64460802078247</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1156790449718372</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1156790449718372</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>14000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>14000</min_tcp_pkts><max_tcp_pkts>14000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="908"><ip.session_id>456</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.644609928131104</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0019073486328125</time_between_pkts_sum><time_between_pkts_avg>0.0019073486328125</time_between_pkts_avg><time_between_pkts_max>0.0019073486328125</time_between_pkts_max><time_between_pkts_min>0.0019073486328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11567901944838732</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11567901944838732</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="909"><ip.session_id>456</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.644614934921265</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11567895244938496</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11567895244938496</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2811</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2811</min_tcp_pkts><max_tcp_pkts>2811</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="910"><ip.session_id>457</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.644621133804321</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1156788694983467</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1156788694983467</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="911"><ip.session_id>457</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.644627094268799</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11567878973784519</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11567878973784519</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5009</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5009</min_tcp_pkts><max_tcp_pkts>5009</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="912"><ip.session_id>458</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.644621133804321</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1156788694983467</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1156788694983467</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="913"><ip.session_id>458</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.64463210105896</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11567872273910891</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11567872273910891</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7019</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7019</min_tcp_pkts><max_tcp_pkts>7019</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="914"><ip.session_id>459</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.644666910171509</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.034809112548828125</time_between_pkts_sum><time_between_pkts_avg>0.034809112548828125</time_between_pkts_avg><time_between_pkts_max>0.034809112548828125</time_between_pkts_max><time_between_pkts_min>0.034809112548828125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11567825694051642</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11567825694051642</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="915"><ip.session_id>459</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.644674062728882</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11567816122894146</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11567816122894146</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10003</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10003</min_tcp_pkts><max_tcp_pkts>10003</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="916"><ip.session_id>460</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.644666910171509</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11567825694051642</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11567825694051642</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="917"><ip.session_id>460</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.644680976867676</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11567806870790288</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11567806870790288</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1099</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1099</min_tcp_pkts><max_tcp_pkts>1099</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="918"><ip.session_id>461</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.644684076309204</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11567802723300259</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11567802723300259</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="919"><ip.session_id>461</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.644688129425049</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1156779729966394</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1156779729966394</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2710</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2710</min_tcp_pkts><max_tcp_pkts>2710</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="920"><ip.session_id>462</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67578911781311</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>31.100988388061523</time_between_pkts_sum><time_between_pkts_avg>31.100988388061523</time_between_pkts_avg><time_between_pkts_max>31.100988388061523</time_between_pkts_max><time_between_pkts_min>31.100988388061523</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526329033825895</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526329033825895</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="921"><ip.session_id>462</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.675832986831665</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0438690185546875</time_between_pkts_sum><time_between_pkts_avg>0.0438690185546875</time_between_pkts_avg><time_between_pkts_max>0.0438690185546875</time_between_pkts_max><time_between_pkts_min>0.0438690185546875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526270751382811</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526270751382811</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3351</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3351</min_tcp_pkts><max_tcp_pkts>3351</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="922"><ip.session_id>463</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.675853967666626</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526242877379256</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526242877379256</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="923"><ip.session_id>463</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.675862073898315</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526232107913988</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526232107913988</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>30951</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>30951</min_tcp_pkts><max_tcp_pkts>30951</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="924"><ip.session_id>464</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.675853967666626</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526242877379256</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526242877379256</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="925"><ip.session_id>464</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.675869941711426</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526221655216944</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526221655216944</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>20000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>20000</min_tcp_pkts><max_tcp_pkts>20000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="926"><ip.session_id>465</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67587399482727</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526216270501623</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526216270501623</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="927"><ip.session_id>465</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.675881147384644</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526206768075095</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526206768075095</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1658</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1658</min_tcp_pkts><max_tcp_pkts>1658</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="928"><ip.session_id>466</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67587399482727</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526216270501623</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526216270501623</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="929"><ip.session_id>466</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.675887107849121</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1152619884939829</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1152619884939829</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2605</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2605</min_tcp_pkts><max_tcp_pkts>2605</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="930"><ip.session_id>467</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.675910949707031</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02384185791015625</time_between_pkts_sum><time_between_pkts_avg>0.02384185791015625</time_between_pkts_avg><time_between_pkts_max>0.02384185791015625</time_between_pkts_max><time_between_pkts_min>0.02384185791015625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526167174799876</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526167174799876</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="931"><ip.session_id>467</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.675918102264404</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526157672454299</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526157672454299</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8873</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8873</min_tcp_pkts><max_tcp_pkts>8873</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="932"><ip.session_id>468</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.675946950912476</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.028848648071289062</time_between_pkts_sum><time_between_pkts_avg>0.028848648071289062</time_between_pkts_avg><time_between_pkts_max>0.028848648071289062</time_between_pkts_max><time_between_pkts_min>0.028848648071289062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526119346486172</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526119346486172</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="933"><ip.session_id>468</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.675955057144165</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526108577251744</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526108577251744</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1352</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1352</min_tcp_pkts><max_tcp_pkts>1352</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="934"><ip.session_id>469</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.675946950912476</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526119346486172</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526119346486172</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="935"><ip.session_id>469</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.675961017608643</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526100658709855</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526100658709855</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1097</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1097</min_tcp_pkts><max_tcp_pkts>1097</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="936"><ip.session_id>470</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.675976991653442</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015974044799804688</time_between_pkts_sum><time_between_pkts_avg>0.015974044799804688</time_between_pkts_avg><time_between_pkts_max>0.015974044799804688</time_between_pkts_max><time_between_pkts_min>0.015974044799804688</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526079437071247</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526079437071247</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="937"><ip.session_id>470</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.675985097885132</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526068667911396</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526068667911396</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3871</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3871</min_tcp_pkts><max_tcp_pkts>3871</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="938"><ip.session_id>471</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.675976991653442</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526079437071247</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526079437071247</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="939"><ip.session_id>471</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67599105834961</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526060749424344</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526060749424344</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2068</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2068</min_tcp_pkts><max_tcp_pkts>2068</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="940"><ip.session_id>472</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67599606513977</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526054097903628</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526054097903628</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="941"><ip.session_id>472</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.676002025604248</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526046179436594</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526046179436594</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>89</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>89</min_tcp_pkts><max_tcp_pkts>89</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="942"><ip.session_id>473</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.676006078720093</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11526040794885227</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11526040794885227</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="943"><ip.session_id>473</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.676047086715698</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04100799560546875</time_between_pkts_sum><time_between_pkts_avg>0.04100799560546875</time_between_pkts_avg><time_between_pkts_max>0.04100799560546875</time_between_pkts_max><time_between_pkts_min>0.04100799560546875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11525986316177869</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11525986316177869</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3580</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3580</min_tcp_pkts><max_tcp_pkts>3580</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="944"><ip.session_id>474</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.676069021224976</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02193450927734375</time_between_pkts_sum><time_between_pkts_avg>0.02193450927734375</time_between_pkts_avg><time_between_pkts_max>0.02193450927734375</time_between_pkts_max><time_between_pkts_min>0.02193450927734375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11525957176615566</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11525957176615566</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="945"><ip.session_id>474</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.676082134246826</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.013113021850585938</time_between_pkts_sum><time_between_pkts_avg>0.013113021850585938</time_between_pkts_avg><time_between_pkts_max>0.013113021850585938</time_between_pkts_max><time_between_pkts_min>0.013113021850585938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11525939756295431</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11525939756295431</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7741</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7741</min_tcp_pkts><max_tcp_pkts>7741</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="946"><ip.session_id>475</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.676069021224976</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11525957176615566</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11525957176615566</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="947"><ip.session_id>475</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67608904838562</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11525930571056925</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11525930571056925</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4446</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4446</min_tcp_pkts><max_tcp_pkts>4446</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="948"><ip.session_id>476</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.676069021224976</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11525957176615566</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11525957176615566</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="949"><ip.session_id>476</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.676092147827148</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11525926453540968</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11525926453540968</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1032</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1032</min_tcp_pkts><max_tcp_pkts>1032</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="950"><ip.session_id>477</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.676154136657715</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.06198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.06198883056640625</time_between_pkts_avg><time_between_pkts_max>0.06198883056640625</time_between_pkts_max><time_between_pkts_min>0.06198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11525844103839614</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11525844103839614</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="951"><ip.session_id>477</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.676161050796509</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11525834918753562</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11525834918753562</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>26</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>26</min_tcp_pkts><max_tcp_pkts>26</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="952"><ip.session_id>478</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677263975143433</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>1.1029243469238281</time_between_pkts_sum><time_between_pkts_avg>1.1029243469238281</time_between_pkts_avg><time_between_pkts_max>1.1029243469238281</time_between_pkts_max><time_between_pkts_min>1.1029243469238281</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1152436992656398</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1152436992656398</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="953"><ip.session_id>478</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67726993560791</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11524362010410849</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11524362010410849</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>50500</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>50500</min_tcp_pkts><max_tcp_pkts>50500</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="954"><ip.session_id>479</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67737102508545</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.1010894775390625</time_between_pkts_sum><time_between_pkts_avg>0.1010894775390625</time_between_pkts_avg><time_between_pkts_max>0.1010894775390625</time_between_pkts_max><time_between_pkts_min>0.1010894775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11524227754110038</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11524227754110038</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="955"><ip.session_id>479</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677397966384888</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.026941299438476562</time_between_pkts_sum><time_between_pkts_avg>0.026941299438476562</time_between_pkts_avg><time_between_pkts_max>0.026941299438476562</time_between_pkts_max><time_between_pkts_min>0.026941299438476562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11524191974067227</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11524191974067227</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3128</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3128</min_tcp_pkts><max_tcp_pkts>3128</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="956"><ip.session_id>480</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67737102508545</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11524227754110038</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11524227754110038</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="957"><ip.session_id>480</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67740511894226</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1152418247497814</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1152418247497814</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3300</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3300</min_tcp_pkts><max_tcp_pkts>3300</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="958"><ip.session_id>481</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677427053451538</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02193450927734375</time_between_pkts_sum><time_between_pkts_avg>0.02193450927734375</time_between_pkts_avg><time_between_pkts_max>0.02193450927734375</time_between_pkts_max><time_between_pkts_min>0.02193450927734375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11524153344535919</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11524153344535919</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="959"><ip.session_id>481</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677434921264648</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11524142895608834</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11524142895608834</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>27356</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>27356</min_tcp_pkts><max_tcp_pkts>27356</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="960"><ip.session_id>482</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677427053451538</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11524153344535919</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11524153344535919</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="961"><ip.session_id>482</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677457094192505</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.022172927856445312</time_between_pkts_sum><time_between_pkts_avg>0.022172927856445312</time_between_pkts_avg><time_between_pkts_max>0.022172927856445312</time_between_pkts_max><time_between_pkts_min>0.022172927856445312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1152411344873445</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1152411344873445</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>17877</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>17877</min_tcp_pkts><max_tcp_pkts>17877</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="962"><ip.session_id>483</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677501916885376</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04482269287109375</time_between_pkts_sum><time_between_pkts_avg>0.04482269287109375</time_between_pkts_avg><time_between_pkts_max>0.04482269287109375</time_between_pkts_max><time_between_pkts_min>0.04482269287109375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11524053922179149</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11524053922179149</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="963"><ip.session_id>483</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67751407623291</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.012159347534179688</time_between_pkts_sum><time_between_pkts_avg>0.012159347534179688</time_between_pkts_avg><time_between_pkts_max>0.012159347534179688</time_between_pkts_max><time_between_pkts_min>0.012159347534179688</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1152403777412391</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1152403777412391</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1839</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1839</min_tcp_pkts><max_tcp_pkts>1839</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="964"><ip.session_id>484</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677501916885376</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11524053922179149</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11524053922179149</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="965"><ip.session_id>484</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677520990371704</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11524028591916603</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11524028591916603</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3370</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3370</min_tcp_pkts><max_tcp_pkts>3370</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="966"><ip.session_id>485</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677525043487549</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11524023209250159</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11524023209250159</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="967"><ip.session_id>485</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67753005027771</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11524016560080903</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11524016560080903</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1060</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1060</min_tcp_pkts><max_tcp_pkts>1060</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="968"><ip.session_id>486</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677640914916992</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.11086463928222656</time_between_pkts_sum><time_between_pkts_avg>0.11086463928222656</time_between_pkts_avg><time_between_pkts_max>0.11086463928222656</time_between_pkts_max><time_between_pkts_min>0.11086463928222656</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523869330441933</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523869330441933</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="969"><ip.session_id>486</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677649974822998</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523857298938789</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523857298938789</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>52822</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>52822</min_tcp_pkts><max_tcp_pkts>52822</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="970"><ip.session_id>487</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677640914916992</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523869330441933</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523869330441933</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="971"><ip.session_id>487</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677655935287476</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523849383489894</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523849383489894</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1311</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1311</min_tcp_pkts><max_tcp_pkts>1311</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="972"><ip.session_id>488</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67765998840332</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523844000990859</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523844000990859</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="973"><ip.session_id>488</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677690029144287</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030040740966796875</time_between_pkts_sum><time_between_pkts_avg>0.030040740966796875</time_between_pkts_avg><time_between_pkts_max>0.030040740966796875</time_between_pkts_max><time_between_pkts_min>0.030040740966796875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523804107331208</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523804107331208</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10215</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10215</min_tcp_pkts><max_tcp_pkts>10215</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="974"><ip.session_id>489</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67765998840332</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523844000990859</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523844000990859</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="975"><ip.session_id>489</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67772102355957</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.030994415283203125</time_between_pkts_max><time_between_pkts_min>0.030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523762947495672</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523762947495672</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9917</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9917</min_tcp_pkts><max_tcp_pkts>9917</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="976"><ip.session_id>490</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67772912979126</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523752182664115</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523752182664115</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="977"><ip.session_id>490</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677747964859009</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.017881393432617188</time_between_pkts_sum><time_between_pkts_avg>0.017881393432617188</time_between_pkts_avg><time_between_pkts_max>0.017881393432617188</time_between_pkts_max><time_between_pkts_min>0.017881393432617188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523727170339032</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523727170339032</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>16993</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>16993</min_tcp_pkts><max_tcp_pkts>16993</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="978"><ip.session_id>491</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67772912979126</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523752182664115</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523752182664115</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="979"><ip.session_id>491</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67777395248413</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523692659840908</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523692659840908</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5051</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5051</min_tcp_pkts><max_tcp_pkts>5051</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="980"><ip.session_id>492</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67772912979126</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523752182664115</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523752182664115</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="981"><ip.session_id>492</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67778205871582</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523681895140667</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523681895140667</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>264</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>264</min_tcp_pkts><max_tcp_pkts>264</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="982"><ip.session_id>493</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67772912979126</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523752182664115</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523752182664115</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="983"><ip.session_id>493</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677787065505981</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523675246365271</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523675246365271</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7025</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7025</min_tcp_pkts><max_tcp_pkts>7025</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="984"><ip.session_id>494</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67772912979126</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523752182664115</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523752182664115</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="985"><ip.session_id>494</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67778992652893</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523671447068488</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523671447068488</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5102</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5102</min_tcp_pkts><max_tcp_pkts>5102</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="986"><ip.session_id>495</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677730083465576</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523750916214666</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523750916214666</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="987"><ip.session_id>495</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677793979644775</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1152366606473567</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1152366606473567</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1187</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1187</min_tcp_pkts><max_tcp_pkts>1187</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="988"><ip.session_id>496</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677730083465576</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523750916214666</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523750916214666</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="989"><ip.session_id>496</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67779803276062</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1152366068240788</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1152366068240788</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1688</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1688</min_tcp_pkts><max_tcp_pkts>1688</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="990"><ip.session_id>497</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67780613899231</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523649917767381</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523649917767381</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="991"><ip.session_id>497</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677855968475342</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04982948303222656</time_between_pkts_sum><time_between_pkts_avg>0.04982948303222656</time_between_pkts_avg><time_between_pkts_max>0.04982948303222656</time_between_pkts_max><time_between_pkts_min>0.04982948303222656</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523583747330797</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523583747330797</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9595</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9595</min_tcp_pkts><max_tcp_pkts>9595</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="992"><ip.session_id>498</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67780613899231</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523649917767381</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523649917767381</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="993"><ip.session_id>498</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677864074707031</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523572982834034</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523572982834034</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>90</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>90</min_tcp_pkts><max_tcp_pkts>90</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="994"><ip.session_id>499</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67780613899231</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523649917767381</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523649917767381</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="995"><ip.session_id>499</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677869081497192</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523566334184314</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523566334184314</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>19283</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>19283</min_tcp_pkts><max_tcp_pkts>19283</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="996"><ip.session_id>500</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67780613899231</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523649917767381</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523649917767381</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="997"><ip.session_id>500</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677871942520142</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523562534959347</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523562534959347</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1199</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1199</min_tcp_pkts><max_tcp_pkts>1199</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="998"><ip.session_id>501</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67780613899231</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523649917767381</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523649917767381</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="999"><ip.session_id>501</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677878141403198</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523554303313847</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523554303313847</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2020</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2020</min_tcp_pkts><max_tcp_pkts>2020</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1000"><ip.session_id>502</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67780613899231</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523649917767381</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523649917767381</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1001"><ip.session_id>502</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677881002426147</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523550504096815</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523550504096815</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7201</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7201</min_tcp_pkts><max_tcp_pkts>7201</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1002"><ip.session_id>503</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677885055541992</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523545121876971</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523545121876971</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1003"><ip.session_id>503</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677909135818481</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.023126602172851562</time_between_pkts_sum><time_between_pkts_avg>0.023126602172851562</time_between_pkts_avg><time_between_pkts_max>0.023126602172851562</time_between_pkts_max><time_between_pkts_min>0.023126602172851562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523513145262752</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523513145262752</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3052</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3052</min_tcp_pkts><max_tcp_pkts>3052</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1004"><ip.session_id>504</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677886009216309</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523543855473034</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523543855473034</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1005"><ip.session_id>504</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677917003631592</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1152350269749657</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1152350269749657</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3703</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3703</min_tcp_pkts><max_tcp_pkts>3703</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1006"><ip.session_id>505</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677886009216309</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523543855473034</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523543855473034</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1007"><ip.session_id>505</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677942991256714</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523468188342903</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523468188342903</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1126</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1126</min_tcp_pkts><max_tcp_pkts>1126</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1008"><ip.session_id>506</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677948951721191</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523460273428542</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523460273428542</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1009"><ip.session_id>506</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677958965301514</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523446976396888</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523446976396888</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>42510</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>42510</min_tcp_pkts><max_tcp_pkts>42510</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1010"><ip.session_id>507</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677950143814087</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.0011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.0011920928955078125</time_between_pkts_max><time_between_pkts_min>0.0011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523458690446974</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523458690446974</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1011"><ip.session_id>507</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677966117858887</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523437478535925</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523437478535925</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2105</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2105</min_tcp_pkts><max_tcp_pkts>2105</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1012"><ip.session_id>508</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677971124649048</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523430830042566</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523430830042566</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1013"><ip.session_id>508</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677977085113525</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523422915179522</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523422915179522</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5815</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5815</min_tcp_pkts><max_tcp_pkts>5815</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1014"><ip.session_id>509</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677992105484009</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015020370483398438</time_between_pkts_sum><time_between_pkts_avg>0.015020370483398438</time_between_pkts_avg><time_between_pkts_max>0.015020370483398438</time_between_pkts_max><time_between_pkts_min>0.015020370483398438</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523402969772877</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523402969772877</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1015"><ip.session_id>509</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.678004026412964</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523387140134204</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523387140134204</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6692</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6692</min_tcp_pkts><max_tcp_pkts>6692</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1016"><ip.session_id>510</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.677993059158325</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523401703400182</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523401703400182</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1017"><ip.session_id>510</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.678010940551758</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523377958963703</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523377958963703</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1131</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1131</min_tcp_pkts><max_tcp_pkts>1131</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1018"><ip.session_id>511</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67802906036377</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.01811981201171875</time_between_pkts_sum><time_between_pkts_avg>0.01811981201171875</time_between_pkts_avg><time_between_pkts_max>0.01811981201171875</time_between_pkts_max><time_between_pkts_min>0.01811981201171875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523353898034557</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523353898034557</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1019"><ip.session_id>511</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67803692817688</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523343450557134</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523343450557134</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2717</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2717</min_tcp_pkts><max_tcp_pkts>2717</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1020"><ip.session_id>512</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.678041934967041</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523336802172275</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523336802172275</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1021"><ip.session_id>512</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.678046941757202</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523330153795086</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523330153795086</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>161</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>161</min_tcp_pkts><max_tcp_pkts>161</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1022"><ip.session_id>513</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67809796333313</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.051021575927734375</time_between_pkts_sum><time_between_pkts_avg>0.051021575927734375</time_between_pkts_avg><time_between_pkts_max>0.051021575927734375</time_between_pkts_max><time_between_pkts_min>0.051021575927734375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523262404103062</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523262404103062</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1023"><ip.session_id>513</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.678103923797607</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11523254489471382</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11523254489471382</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2968</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2968</min_tcp_pkts><max_tcp_pkts>2968</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1024"><ip.session_id>514</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.678110122680664</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1152324625826597</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1152324625826597</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1025"><ip.session_id>514</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.678115129470825</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1152323960999326</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1152323960999326</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5550</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5550</min_tcp_pkts><max_tcp_pkts>5550</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1026"><ip.session_id>515</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.678972959518433</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.8578300476074219</time_between_pkts_sum><time_between_pkts_avg>0.8578300476074219</time_between_pkts_avg><time_between_pkts_max>0.8578300476074219</time_between_pkts_max><time_between_pkts_min>0.8578300476074219</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11522100652511846</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11522100652511846</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1027"><ip.session_id>515</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.678993940353394</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11522072798673734</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11522072798673734</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1066</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1066</min_tcp_pkts><max_tcp_pkts>1066</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1028"><ip.session_id>516</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679034948348999</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04100799560546875</time_between_pkts_sum><time_between_pkts_avg>0.04100799560546875</time_between_pkts_avg><time_between_pkts_max>0.04100799560546875</time_between_pkts_max><time_between_pkts_min>0.04100799560546875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11522018357469901</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11522018357469901</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1029"><ip.session_id>516</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679042100906372</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11522008861963784</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11522008861963784</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>163</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>163</min_tcp_pkts><max_tcp_pkts>163</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1030"><ip.session_id>517</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679076910018921</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.034809112548828125</time_between_pkts_sum><time_between_pkts_avg>0.034809112548828125</time_between_pkts_avg><time_between_pkts_max>0.034809112548828125</time_between_pkts_max><time_between_pkts_min>0.034809112548828125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521962650724107</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521962650724107</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1031"><ip.session_id>517</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679085969924927</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521950623201972</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521950623201972</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6779</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6779</min_tcp_pkts><max_tcp_pkts>6779</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1032"><ip.session_id>518</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.6790931224823</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521941127807497</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521941127807497</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1033"><ip.session_id>518</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679098129272461</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521934481040677</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521934481040677</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8180</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8180</min_tcp_pkts><max_tcp_pkts>8180</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1034"><ip.session_id>519</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679122924804688</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0247955322265625</time_between_pkts_sum><time_between_pkts_avg>0.0247955322265625</time_between_pkts_avg><time_between_pkts_max>0.0247955322265625</time_between_pkts_max><time_between_pkts_min>0.0247955322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521901563832312</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521901563832312</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1035"><ip.session_id>519</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679129123687744</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521893334559609</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521893334559609</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5030</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5030</min_tcp_pkts><max_tcp_pkts>5030</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1036"><ip.session_id>520</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679208993911743</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.07987022399902344</time_between_pkts_sum><time_between_pkts_avg>0.07987022399902344</time_between_pkts_avg><time_between_pkts_max>0.07987022399902344</time_between_pkts_max><time_between_pkts_min>0.07987022399902344</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521787304597413</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521787304597413</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1037"><ip.session_id>520</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679248094558716</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03814697265625</time_between_pkts_sum><time_between_pkts_avg>0.03814697265625</time_between_pkts_avg><time_between_pkts_max>0.03814697265625</time_between_pkts_max><time_between_pkts_min>0.03814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521735398103557</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521735398103557</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5214</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5214</min_tcp_pkts><max_tcp_pkts>5214</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1038"><ip.session_id>521</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67920994758606</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521786038579802</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521786038579802</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1039"><ip.session_id>521</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679259061813354</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521720839049023</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521720839049023</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>616</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>616</min_tcp_pkts><max_tcp_pkts>616</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1040"><ip.session_id>522</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679265022277832</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521712926534818</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521712926534818</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1041"><ip.session_id>522</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679270029067993</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521706280031284</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521706280031284</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>57797</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>57797</min_tcp_pkts><max_tcp_pkts>57797</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1042"><ip.session_id>523</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67939805984497</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.12803077697753906</time_between_pkts_sum><time_between_pkts_avg>0.12803077697753906</time_between_pkts_avg><time_between_pkts_max>0.12803077697753906</time_between_pkts_max><time_between_pkts_min>0.12803077697753906</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521536322046068</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521536322046068</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1043"><ip.session_id>523</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679405927658081</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1152152587786414</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1152152587786414</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2525</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2525</min_tcp_pkts><max_tcp_pkts>2525</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1044"><ip.session_id>524</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67939805984497</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521536322046068</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521536322046068</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1045"><ip.session_id>524</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67941403388977</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521515117211657</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521515117211657</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1077</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1077</min_tcp_pkts><max_tcp_pkts>1077</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1046"><ip.session_id>525</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679419040679932</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521508470936341</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521508470936341</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1047"><ip.session_id>525</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679427146911621</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521497710316371</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521497710316371</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4279</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4279</min_tcp_pkts><max_tcp_pkts>4279</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1048"><ip.session_id>526</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679419040679932</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521508470936341</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521508470936341</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1049"><ip.session_id>526</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679433107376099</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521489798108629</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521489798108629</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32779</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32779</min_tcp_pkts><max_tcp_pkts>32779</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1050"><ip.session_id>527</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679436922073364</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521484734301378</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521484734301378</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1051"><ip.session_id>527</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679446935653687</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1152147144182852</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1152147144182852</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3986</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3986</min_tcp_pkts><max_tcp_pkts>3986</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1052"><ip.session_id>528</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679436922073364</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521484734301378</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521484734301378</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1053"><ip.session_id>528</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679481983184814</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03504753112792969</time_between_pkts_sum><time_between_pkts_avg>0.03504753112792969</time_between_pkts_avg><time_between_pkts_max>0.03504753112792969</time_between_pkts_max><time_between_pkts_min>0.03504753112792969</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1152142491841505</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1152142491841505</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>512</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>512</min_tcp_pkts><max_tcp_pkts>512</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1054"><ip.session_id>529</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679436922073364</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521484734301378</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521484734301378</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1055"><ip.session_id>529</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679489135742188</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521415423887037</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521415423887037</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>911</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>911</min_tcp_pkts><max_tcp_pkts>911</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1056"><ip.session_id>530</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679436922073364</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521484734301378</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521484734301378</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1057"><ip.session_id>530</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679491996765137</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521411626080212</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521411626080212</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5050</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5050</min_tcp_pkts><max_tcp_pkts>5050</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1058"><ip.session_id>531</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67949891090393</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1152140244805739</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1152140244805739</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1059"><ip.session_id>531</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679511070251465</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521386307432036</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521386307432036</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8181</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8181</min_tcp_pkts><max_tcp_pkts>8181</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1060"><ip.session_id>532</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679500102996826</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.0011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.0011920928955078125</time_between_pkts_max><time_between_pkts_min>0.0011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1152140086564114</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1152140086564114</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1061"><ip.session_id>532</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67952013015747</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521374281113134</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521374281113134</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8899</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8899</min_tcp_pkts><max_tcp_pkts>8899</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1062"><ip.session_id>533</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679500102996826</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1152140086564114</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1152140086564114</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1063"><ip.session_id>533</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679525136947632</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521367635000301</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521367635000301</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>16001</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>16001</min_tcp_pkts><max_tcp_pkts>16001</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1064"><ip.session_id>534</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679500102996826</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1152140086564114</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1152140086564114</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1065"><ip.session_id>534</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679528951644897</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521362571300432</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521362571300432</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10180</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10180</min_tcp_pkts><max_tcp_pkts>10180</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1066"><ip.session_id>535</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679533958435059</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521355925201109</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521355925201109</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1067"><ip.session_id>535</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679541110992432</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521346430786805</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521346430786805</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10009</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10009</min_tcp_pkts><max_tcp_pkts>10009</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1068"><ip.session_id>536</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679533958435059</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521355925201109</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521355925201109</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1069"><ip.session_id>536</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67954397201538</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521342633025466</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521342633025466</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2967</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2967</min_tcp_pkts><max_tcp_pkts>2967</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1070"><ip.session_id>537</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679533958435059</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521355925201109</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521355925201109</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1071"><ip.session_id>537</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679548025131226</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521337252867854</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521337252867854</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>500</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>500</min_tcp_pkts><max_tcp_pkts>500</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1072"><ip.session_id>538</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67958402633667</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03600120544433594</time_between_pkts_sum><time_between_pkts_avg>0.03600120544433594</time_between_pkts_avg><time_between_pkts_max>0.03600120544433594</time_between_pkts_max><time_between_pkts_min>0.03600120544433594</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521289464629596</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521289464629596</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1073"><ip.session_id>538</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67960000038147</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015974044799804688</time_between_pkts_sum><time_between_pkts_avg>0.015974044799804688</time_between_pkts_avg><time_between_pkts_max>0.015974044799804688</time_between_pkts_max><time_between_pkts_min>0.015974044799804688</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521268260703832</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521268260703832</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3527</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3527</min_tcp_pkts><max_tcp_pkts>3527</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1074"><ip.session_id>539</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67958402633667</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521289464629596</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521289464629596</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1075"><ip.session_id>539</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679623126983643</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.023126602172851562</time_between_pkts_sum><time_between_pkts_avg>0.023126602172851562</time_between_pkts_avg><time_between_pkts_max>0.023126602172851562</time_between_pkts_max><time_between_pkts_min>0.023126602172851562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521237562621243</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521237562621243</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2382</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2382</min_tcp_pkts><max_tcp_pkts>2382</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1076"><ip.session_id>540</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67958402633667</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521289464629596</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521289464629596</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1077"><ip.session_id>540</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679630994796753</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521227118980956</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521227118980956</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>144</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>144</min_tcp_pkts><max_tcp_pkts>144</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1078"><ip.session_id>541</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.67958402633667</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521289464629596</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521289464629596</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1079"><ip.session_id>541</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.679635047912598</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11521221738931227</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11521221738931227</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1244</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1244</min_tcp_pkts><max_tcp_pkts>1244</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1080"><ip.session_id>542</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712711095809937</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>33.07604789733887</time_between_pkts_sum><time_between_pkts_avg>33.07604789733887</time_between_pkts_avg><time_between_pkts_max>33.07604789733887</time_between_pkts_max><time_between_pkts_min>33.07604789733887</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477483747635267</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477483747635267</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1081"><ip.session_id>542</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712736129760742</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.024080276489257812</time_between_pkts_sum><time_between_pkts_avg>0.024080276489257812</time_between_pkts_avg><time_between_pkts_max>0.024080276489257812</time_between_pkts_max><time_between_pkts_min>0.024080276489257812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477450769847436</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477450769847436</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8194</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8194</min_tcp_pkts><max_tcp_pkts>8194</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1082"><ip.session_id>543</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712712049484253</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477482491335116</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477482491335116</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1083"><ip.session_id>543</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712744951248169</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477439149148308</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477439149148308</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5001</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5001</min_tcp_pkts><max_tcp_pkts>5001</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1084"><ip.session_id>544</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712749004364014</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477433809916057</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477433809916057</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1085"><ip.session_id>544</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712754011154175</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477427214400725</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477427214400725</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1174</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1174</min_tcp_pkts><max_tcp_pkts>1174</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1086"><ip.session_id>545</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712780952453613</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.026941299438476562</time_between_pkts_sum><time_between_pkts_avg>0.026941299438476562</time_between_pkts_avg><time_between_pkts_max>0.026941299438476562</time_between_pkts_max><time_between_pkts_min>0.026941299438476562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477391724376924</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477391724376924</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1087"><ip.session_id>545</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712794065475464</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.013113021850585938</time_between_pkts_sum><time_between_pkts_avg>0.013113021850585938</time_between_pkts_avg><time_between_pkts_max>0.013113021850585938</time_between_pkts_max><time_between_pkts_min>0.013113021850585938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477374450550946</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477374450550946</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3000</min_tcp_pkts><max_tcp_pkts>3000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1088"><ip.session_id>546</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712780952453613</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477391724376924</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477391724376924</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1089"><ip.session_id>546</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712801933288574</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477364086280317</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477364086280317</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>45100</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>45100</min_tcp_pkts><max_tcp_pkts>45100</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1090"><ip.session_id>547</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71280813217163</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147735592050452</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147735592050452</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1091"><ip.session_id>547</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712821006774902</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.012874603271484375</time_between_pkts_sum><time_between_pkts_avg>0.012874603271484375</time_between_pkts_avg><time_between_pkts_max>0.012874603271484375</time_between_pkts_max><time_between_pkts_min>0.012874603271484375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477338960853453</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477338960853453</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>254</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>254</min_tcp_pkts><max_tcp_pkts>254</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1092"><ip.session_id>548</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71280813217163</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147735592050452</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147735592050452</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1093"><ip.session_id>548</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712861061096191</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0400543212890625</time_between_pkts_sum><time_between_pkts_avg>0.0400543212890625</time_between_pkts_avg><time_between_pkts_max>0.0400543212890625</time_between_pkts_max><time_between_pkts_min>0.0400543212890625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477286197815106</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477286197815106</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8994</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8994</min_tcp_pkts><max_tcp_pkts>8994</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1094"><ip.session_id>549</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71280813217163</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147735592050452</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147735592050452</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1095"><ip.session_id>549</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712868928909302</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477275833703864</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477275833703864</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8086</min_tcp_pkts><max_tcp_pkts>8086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1096"><ip.session_id>550</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712873935699463</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477269238370091</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477269238370091</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1097"><ip.session_id>550</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71288013458252</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477261072729257</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477261072729257</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>19350</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>19350</min_tcp_pkts><max_tcp_pkts>19350</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1098"><ip.session_id>551</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712902069091797</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02193450927734375</time_between_pkts_sum><time_between_pkts_avg>0.02193450927734375</time_between_pkts_avg><time_between_pkts_max>0.02193450927734375</time_between_pkts_max><time_between_pkts_min>0.02193450927734375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477232179016521</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477232179016521</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1099"><ip.session_id>551</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712911128997803</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477220244699367</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477220244699367</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1033</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1033</min_tcp_pkts><max_tcp_pkts>1033</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1100"><ip.session_id>552</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712902069091797</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477232179016521</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477232179016521</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1101"><ip.session_id>552</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71291995048523</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477208624467039</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477208624467039</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3476</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3476</min_tcp_pkts><max_tcp_pkts>3476</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1102"><ip.session_id>553</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712923049926758</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477204541688293</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477204541688293</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1103"><ip.session_id>553</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712928056716919</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477197946436456</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477197946436456</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7004</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7004</min_tcp_pkts><max_tcp_pkts>7004</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1104"><ip.session_id>554</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712952136993408</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.024080276489257812</time_between_pkts_sum><time_between_pkts_avg>0.024080276489257812</time_between_pkts_avg><time_between_pkts_max>0.024080276489257812</time_between_pkts_max><time_between_pkts_min>0.024080276489257812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477166226521607</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477166226521607</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1105"><ip.session_id>554</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.712958097457886</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477158375084605</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477158375084605</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>49167</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>49167</min_tcp_pkts><max_tcp_pkts>49167</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1106"><ip.session_id>555</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.713073015213013</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.11491775512695312</time_between_pkts_sum><time_between_pkts_avg>0.11491775512695312</time_between_pkts_avg><time_between_pkts_max>0.11491775512695312</time_between_pkts_max><time_between_pkts_min>0.11491775512695312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11477007001479288</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11477007001479288</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1107"><ip.session_id>555</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.713081121444702</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147699632382387</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147699632382387</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9111</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9111</min_tcp_pkts><max_tcp_pkts>9111</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1108"><ip.session_id>556</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.713086128234863</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11476989728811329</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11476989728811329</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1109"><ip.session_id>556</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.713089942932129</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11476984704044958</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11476984704044958</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7937</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7937</min_tcp_pkts><max_tcp_pkts>7937</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1110"><ip.session_id>557</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.713804006576538</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.7140636444091797</time_between_pkts_sum><time_between_pkts_avg>0.7140636444091797</time_between_pkts_avg><time_between_pkts_max>0.7140636444091797</time_between_pkts_max><time_between_pkts_min>0.7140636444091797</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11476044208078051</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11476044208078051</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1111"><ip.session_id>557</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.713809967041016</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11476036358176102</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11476036358176102</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5952</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5952</min_tcp_pkts><max_tcp_pkts>5952</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1112"><ip.session_id>558</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.713864088058472</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.05412101745605469</time_between_pkts_sum><time_between_pkts_avg>0.05412101745605469</time_between_pkts_avg><time_between_pkts_max>0.05412101745605469</time_between_pkts_max><time_between_pkts_min>0.05412101745605469</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475965081557854</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475965081557854</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1113"><ip.session_id>558</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.713887929916382</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02384185791015625</time_between_pkts_sum><time_between_pkts_avg>0.02384185791015625</time_between_pkts_avg><time_between_pkts_max>0.02384185791015625</time_between_pkts_max><time_between_pkts_min>0.02384185791015625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475933682447485</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475933682447485</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5906</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5906</min_tcp_pkts><max_tcp_pkts>5906</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1114"><ip.session_id>559</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.713894128799438</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475925518706934</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475925518706934</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1115"><ip.session_id>559</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.713901996612549</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147591515705296</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147591515705296</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6667</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6667</min_tcp_pkts><max_tcp_pkts>6667</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1116"><ip.session_id>560</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.713894128799438</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475925518706934</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475925518706934</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1117"><ip.session_id>560</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.713907957077026</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475907307327558</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475907307327558</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8193</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8193</min_tcp_pkts><max_tcp_pkts>8193</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1118"><ip.session_id>561</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.713930130004883</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.022172927856445312</time_between_pkts_sum><time_between_pkts_avg>0.022172927856445312</time_between_pkts_avg><time_between_pkts_max>0.022172927856445312</time_between_pkts_max><time_between_pkts_min>0.022172927856445312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147587810644334</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147587810644334</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1119"><ip.session_id>561</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.713937044143677</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475869000821666</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475869000821666</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2638</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2638</min_tcp_pkts><max_tcp_pkts>2638</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1120"><ip.session_id>562</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.713942050933838</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475862407104648</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475862407104648</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1121"><ip.session_id>562</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.713947057723999</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475855813395205</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475855813395205</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>19101</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>19101</min_tcp_pkts><max_tcp_pkts>19101</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1122"><ip.session_id>563</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.713968992233276</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02193450927734375</time_between_pkts_sum><time_between_pkts_avg>0.02193450927734375</time_between_pkts_avg><time_between_pkts_max>0.02193450927734375</time_between_pkts_max><time_between_pkts_min>0.02193450927734375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475826926757438</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475826926757438</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1123"><ip.session_id>563</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.713974952697754</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475819077152737</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475819077152737</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8084</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8084</min_tcp_pkts><max_tcp_pkts>8084</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1124"><ip.session_id>564</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714143991470337</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.1690387725830078</time_between_pkts_sum><time_between_pkts_avg>0.1690387725830078</time_between_pkts_avg><time_between_pkts_max>0.1690387725830078</time_between_pkts_max><time_between_pkts_min>0.1690387725830078</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475596466834032</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475596466834032</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1125"><ip.session_id>564</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714152097702026</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475585791803036</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475585791803036</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5678</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5678</min_tcp_pkts><max_tcp_pkts>5678</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1126"><ip.session_id>565</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714157104492188</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475579198411462</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475579198411462</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1127"><ip.session_id>565</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714160919189453</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475574174880109</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475574174880109</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>515</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>515</min_tcp_pkts><max_tcp_pkts>515</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1128"><ip.session_id>566</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714191913604736</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.030994415283203125</time_between_pkts_max><time_between_pkts_min>0.030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147553335885091</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147553335885091</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1129"><ip.session_id>566</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714198112487793</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475525195679911</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475525195679911</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1443</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1443</min_tcp_pkts><max_tcp_pkts>1443</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1130"><ip.session_id>567</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714218139648438</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02002716064453125</time_between_pkts_sum><time_between_pkts_avg>0.02002716064453125</time_between_pkts_avg><time_between_pkts_max>0.02002716064453125</time_between_pkts_max><time_between_pkts_min>0.02002716064453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475498822437598</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475498822437598</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1131"><ip.session_id>567</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714224100112915</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475490973281746</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475490973281746</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1805</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1805</min_tcp_pkts><max_tcp_pkts>1805</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1132"><ip.session_id>568</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714246988296509</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02288818359375</time_between_pkts_sum><time_between_pkts_avg>0.02288818359375</time_between_pkts_avg><time_between_pkts_max>0.02288818359375</time_between_pkts_max><time_between_pkts_min>0.02288818359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475460832623055</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475460832623055</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1133"><ip.session_id>568</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714252948760986</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475452983519172</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475452983519172</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3005</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3005</min_tcp_pkts><max_tcp_pkts>3005</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1134"><ip.session_id>569</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71427607536316</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.023126602172851562</time_between_pkts_sum><time_between_pkts_avg>0.023126602172851562</time_between_pkts_avg><time_between_pkts_max>0.023126602172851562</time_between_pkts_max><time_between_pkts_min>0.023126602172851562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475422529097759</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475422529097759</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1135"><ip.session_id>569</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714292049407959</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015020370483398438</time_between_pkts_sum><time_between_pkts_avg>0.015020370483398438</time_between_pkts_avg><time_between_pkts_max>0.015020370483398438</time_between_pkts_max><time_between_pkts_min>0.015020370483398438</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475401493663953</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475401493663953</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>17988</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>17988</min_tcp_pkts><max_tcp_pkts>17988</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1136"><ip.session_id>570</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714277029037476</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475421273248801</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475421273248801</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1137"><ip.session_id>570</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71429991722107</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475391132956245</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475391132956245</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1322</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1322</min_tcp_pkts><max_tcp_pkts>1322</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1138"><ip.session_id>571</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714277029037476</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475421273248801</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475421273248801</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1139"><ip.session_id>571</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71430492401123</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475384539788354</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475384539788354</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>666</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>666</min_tcp_pkts><max_tcp_pkts>666</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1140"><ip.session_id>572</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714445114135742</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.14019012451171875</time_between_pkts_sum><time_between_pkts_avg>0.14019012451171875</time_between_pkts_avg><time_between_pkts_max>0.14019012451171875</time_between_pkts_max><time_between_pkts_min>0.14019012451171875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475199934163281</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475199934163281</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1141"><ip.session_id>572</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714452028274536</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475190829617778</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475190829617778</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5431</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5431</min_tcp_pkts><max_tcp_pkts>5431</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1142"><ip.session_id>573</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714457035064697</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475184236680053</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475184236680053</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1143"><ip.session_id>573</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714462041854858</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475177643749902</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475177643749902</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>24</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>24</min_tcp_pkts><max_tcp_pkts>24</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1144"><ip.session_id>574</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714478969573975</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.016927719116210938</time_between_pkts_sum><time_between_pkts_avg>0.016927719116210938</time_between_pkts_avg><time_between_pkts_max>0.016927719116210938</time_between_pkts_max><time_between_pkts_min>0.016927719116210938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475155353423121</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475155353423121</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1145"><ip.session_id>574</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714488983154297</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475142167636776</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475142167636776</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6389</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6389</min_tcp_pkts><max_tcp_pkts>6389</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1146"><ip.session_id>575</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714479923248291</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147515409763264</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147515409763264</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1147"><ip.session_id>575</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71449613571167</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475132749236511</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475132749236511</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>61532</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>61532</min_tcp_pkts><max_tcp_pkts>61532</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1148"><ip.session_id>576</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714510917663574</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014781951904296875</time_between_pkts_sum><time_between_pkts_avg>0.014781951904296875</time_between_pkts_avg><time_between_pkts_max>0.014781951904296875</time_between_pkts_max><time_between_pkts_min>0.014781951904296875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475113284591622</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475113284591622</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1149"><ip.session_id>576</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714519023895264</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475102610459556</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475102610459556</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1069</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1069</min_tcp_pkts><max_tcp_pkts>1069</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1150"><ip.session_id>577</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714510917663574</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475113284591622</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475113284591622</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1151"><ip.session_id>577</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714527130126953</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475091936347348</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475091936347348</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1110</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1110</min_tcp_pkts><max_tcp_pkts>1110</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1152"><ip.session_id>578</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714532136917114</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475085343523259</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475085343523259</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1153"><ip.session_id>578</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714537143707275</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475078750706744</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475078750706744</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1974</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1974</min_tcp_pkts><max_tcp_pkts>1974</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1154"><ip.session_id>579</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714532136917114</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475085343523259</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475085343523259</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1155"><ip.session_id>579</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714543104171753</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475070902125534</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475070902125534</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>43</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>43</min_tcp_pkts><max_tcp_pkts>43</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1156"><ip.session_id>580</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71458101272583</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03790855407714844</time_between_pkts_sum><time_between_pkts_avg>0.03790855407714844</time_between_pkts_avg><time_between_pkts_max>0.03790855407714844</time_between_pkts_max><time_between_pkts_min>0.03790855407714844</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475020985400311</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475020985400311</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1157"><ip.session_id>580</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714590072631836</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475009055681222</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475009055681222</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>18988</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>18988</min_tcp_pkts><max_tcp_pkts>18988</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1158"><ip.session_id>581</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71458101272583</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11475020985400311</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11475020985400311</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1159"><ip.session_id>581</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714596033096313</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147500120719535</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147500120719535</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9103</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9103</min_tcp_pkts><max_tcp_pkts>9103</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1160"><ip.session_id>582</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714600086212158</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474995870231088</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474995870231088</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1161"><ip.session_id>582</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714606046676636</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474988021763252</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474988021763252</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>57294</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>57294</min_tcp_pkts><max_tcp_pkts>57294</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1162"><ip.session_id>583</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714600086212158</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474995870231088</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474995870231088</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1163"><ip.session_id>583</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71461296081543</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474978917554012</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474978917554012</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4001</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4001</min_tcp_pkts><max_tcp_pkts>4001</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1164"><ip.session_id>584</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714620113372803</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474969499421724</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474969499421724</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1165"><ip.session_id>584</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714630126953125</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474956314062494</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474956314062494</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>44442</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>44442</min_tcp_pkts><max_tcp_pkts>44442</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1166"><ip.session_id>585</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714620113372803</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474969499421724</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474969499421724</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1167"><ip.session_id>585</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714637994766235</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474945954158643</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474945954158643</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2190</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2190</min_tcp_pkts><max_tcp_pkts>2190</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1168"><ip.session_id>586</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714645147323608</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474936536080466</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474936536080466</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1169"><ip.session_id>586</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714652061462402</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474927431952922</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474927431952922</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8009</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8009</min_tcp_pkts><max_tcp_pkts>8009</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1170"><ip.session_id>587</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714645147323608</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474936536080466</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474936536080466</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1171"><ip.session_id>587</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71465802192688</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474919583578704</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474919583578704</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9944</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9944</min_tcp_pkts><max_tcp_pkts>9944</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1172"><ip.session_id>588</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714662075042725</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474914246690367</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474914246690367</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1173"><ip.session_id>588</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714668989181519</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474905142598192</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474905142598192</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9929</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9929</min_tcp_pkts><max_tcp_pkts>9929</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1174"><ip.session_id>589</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714662075042725</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474914246690367</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474914246690367</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1175"><ip.session_id>589</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714674949645996</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474897294254464</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474897294254464</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5414</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5414</min_tcp_pkts><max_tcp_pkts>5414</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1176"><ip.session_id>590</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71467900276184</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474891957386861</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474891957386861</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1177"><ip.session_id>590</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714684963226318</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474884109061169</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474884109061169</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1935</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1935</min_tcp_pkts><max_tcp_pkts>1935</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1178"><ip.session_id>591</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71467900276184</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474891957386861</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474891957386861</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1179"><ip.session_id>591</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714692115783691</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474874691084509</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474874691084509</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>843</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>843</min_tcp_pkts><max_tcp_pkts>843</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1180"><ip.session_id>592</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714755058288574</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0629425048828125</time_between_pkts_sum><time_between_pkts_avg>0.0629425048828125</time_between_pkts_avg><time_between_pkts_max>0.0629425048828125</time_between_pkts_max><time_between_pkts_min>0.0629425048828125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474791813556519</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474791813556519</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1181"><ip.session_id>592</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714762926101685</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474781453949696</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474781453949696</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1233</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1233</min_tcp_pkts><max_tcp_pkts>1233</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1182"><ip.session_id>593</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71475601196289</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474790557845606</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474790557845606</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1183"><ip.session_id>593</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714769124984741</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474773291848404</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474773291848404</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7938</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7938</min_tcp_pkts><max_tcp_pkts>7938</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1184"><ip.session_id>594</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714975118637085</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.20599365234375</time_between_pkts_sum><time_between_pkts_avg>0.20599365234375</time_between_pkts_avg><time_between_pkts_max>0.20599365234375</time_between_pkts_max><time_between_pkts_min>0.20599365234375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11474502065547924</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11474502065547924</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1185"><ip.session_id>594</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.714982032775879</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147449296210978</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147449296210978</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>898</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>898</min_tcp_pkts><max_tcp_pkts>898</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1186"><ip.session_id>595</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715503931045532</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.5218982696533203</time_between_pkts_sum><time_between_pkts_avg>0.5218982696533203</time_between_pkts_avg><time_between_pkts_max>0.5218982696533203</time_between_pkts_max><time_between_pkts_min>0.5218982696533203</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473805851178563</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473805851178563</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1187"><ip.session_id>595</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715513944625854</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473792668493386</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473792668493386</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1812</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1812</min_tcp_pkts><max_tcp_pkts>1812</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1188"><ip.session_id>596</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715560913085938</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04696846008300781</time_between_pkts_sum><time_between_pkts_avg>0.04696846008300781</time_between_pkts_avg><time_between_pkts_max>0.04696846008300781</time_between_pkts_max><time_between_pkts_min>0.04696846008300781</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473730835826697</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473730835826697</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1189"><ip.session_id>596</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715572118759155</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011205673217773438</time_between_pkts_sum><time_between_pkts_avg>0.011205673217773438</time_between_pkts_avg><time_between_pkts_max>0.011205673217773438</time_between_pkts_max><time_between_pkts_min>0.011205673217773438</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147371608396915</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147371608396915</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>50001</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>50001</min_tcp_pkts><max_tcp_pkts>50001</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1190"><ip.session_id>597</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715578079223633</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473708237251867</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473708237251867</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1191"><ip.session_id>597</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715587139129639</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473696310262152</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473696310262152</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3001</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3001</min_tcp_pkts><max_tcp_pkts>3001</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1192"><ip.session_id>598</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715578079223633</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473708237251867</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473708237251867</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1193"><ip.session_id>598</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715593099594116</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473688463571916</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473688463571916</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>49999</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>49999</min_tcp_pkts><max_tcp_pkts>49999</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1194"><ip.session_id>599</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715578079223633</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473708237251867</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473708237251867</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1195"><ip.session_id>599</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715595960617065</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473684697164413</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473684697164413</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8300</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8300</min_tcp_pkts><max_tcp_pkts>8300</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1196"><ip.session_id>600</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715630054473877</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03409385681152344</time_between_pkts_sum><time_between_pkts_avg>0.03409385681152344</time_between_pkts_avg><time_between_pkts_max>0.03409385681152344</time_between_pkts_max><time_between_pkts_min>0.03409385681152344</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473639814331994</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473639814331994</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1197"><ip.session_id>600</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715639114379883</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147362788748453</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147362788748453</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2047</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2047</min_tcp_pkts><max_tcp_pkts>2047</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1198"><ip.session_id>601</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715631008148193</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473638558873199</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473638558873199</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1199"><ip.session_id>601</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71564507484436</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147362004088788</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147362004088788</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>14238</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>14238</min_tcp_pkts><max_tcp_pkts>14238</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1200"><ip.session_id>602</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715667009353638</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02193450927734375</time_between_pkts_sum><time_between_pkts_avg>0.02193450927734375</time_between_pkts_avg><time_between_pkts_max>0.02193450927734375</time_between_pkts_max><time_between_pkts_min>0.02193450927734375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473591165504624</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473591165504624</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1201"><ip.session_id>602</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715693950653076</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.026941299438476562</time_between_pkts_sum><time_between_pkts_avg>0.026941299438476562</time_between_pkts_avg><time_between_pkts_max>0.026941299438476562</time_between_pkts_max><time_between_pkts_min>0.026941299438476562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473555699200165</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473555699200165</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>21571</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>21571</min_tcp_pkts><max_tcp_pkts>21571</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1202"><ip.session_id>603</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715667009353638</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473591165504624</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473591165504624</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1203"><ip.session_id>603</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715704917907715</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473541261652295</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473541261652295</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6156</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6156</min_tcp_pkts><max_tcp_pkts>6156</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1204"><ip.session_id>604</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715709924697876</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473534670609914</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473534670609914</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1205"><ip.session_id>604</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715718030929565</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473523999414494</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473523999414494</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5120</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5120</min_tcp_pkts><max_tcp_pkts>5120</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1206"><ip.session_id>605</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715709924697876</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473534670609914</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473534670609914</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1207"><ip.session_id>605</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71572494506836</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473514897528203</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473514897528203</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3071</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3071</min_tcp_pkts><max_tcp_pkts>3071</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1208"><ip.session_id>606</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715862035751343</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.13709068298339844</time_between_pkts_sum><time_between_pkts_avg>0.13709068298339844</time_between_pkts_avg><time_between_pkts_max>0.13709068298339844</time_between_pkts_max><time_between_pkts_min>0.13709068298339844</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473334432074864</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473334432074864</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1209"><ip.session_id>606</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71586799621582</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473326585879585</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473326585879585</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1078</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1078</min_tcp_pkts><max_tcp_pkts>1078</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1210"><ip.session_id>607</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715893030166626</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025033950805664062</time_between_pkts_sum><time_between_pkts_avg>0.025033950805664062</time_between_pkts_avg><time_between_pkts_max>0.025033950805664062</time_between_pkts_max><time_between_pkts_min>0.025033950805664062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473293631976603</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473293631976603</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1211"><ip.session_id>607</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.715898990631104</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473285785837127</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473285785837127</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2042</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2042</min_tcp_pkts><max_tcp_pkts>2042</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1212"><ip.session_id>608</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716068029403687</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.1690387725830078</time_between_pkts_sum><time_between_pkts_avg>0.1690387725830078</time_between_pkts_avg><time_between_pkts_max>0.1690387725830078</time_between_pkts_max><time_between_pkts_min>0.1690387725830078</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473063273789241</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473063273789241</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1213"><ip.session_id>608</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71607494354248</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473054172633919</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473054172633919</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>49153</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>49153</min_tcp_pkts><max_tcp_pkts>49153</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1214"><ip.session_id>609</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716079950332642</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473047582151147</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473047582151147</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1215"><ip.session_id>609</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716084957122803</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473040991675947</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473040991675947</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>65389</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>65389</min_tcp_pkts><max_tcp_pkts>65389</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1216"><ip.session_id>610</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716104984283447</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02002716064453125</time_between_pkts_sum><time_between_pkts_avg>0.02002716064453125</time_between_pkts_avg><time_between_pkts_max>0.02002716064453125</time_between_pkts_max><time_between_pkts_min>0.02002716064453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11473014629850861</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11473014629850861</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1217"><ip.session_id>610</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71611213684082</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147300521494269</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147300521494269</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1045</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1045</min_tcp_pkts><max_tcp_pkts>1045</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1218"><ip.session_id>611</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716229915618896</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.11777877807617188</time_between_pkts_sum><time_between_pkts_avg>0.11777877807617188</time_between_pkts_avg><time_between_pkts_max>0.11777877807617188</time_between_pkts_max><time_between_pkts_min>0.11777877807617188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11472850185010235</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11472850185010235</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1219"><ip.session_id>611</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716236114501953</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11472842025656164</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11472842025656164</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1068</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1068</min_tcp_pkts><max_tcp_pkts>1068</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1220"><ip.session_id>612</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71626091003418</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0247955322265625</time_between_pkts_sum><time_between_pkts_avg>0.0247955322265625</time_between_pkts_avg><time_between_pkts_max>0.0247955322265625</time_between_pkts_max><time_between_pkts_min>0.0247955322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11472809388355937</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11472809388355937</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1221"><ip.session_id>612</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716268062591553</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147279997378461</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147279997378461</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9010</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9010</min_tcp_pkts><max_tcp_pkts>9010</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1222"><ip.session_id>613</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71627402305603</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11472792128320307</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11472792128320307</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1223"><ip.session_id>613</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716280937194824</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11472783027595158</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11472783027595158</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>50800</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>50800</min_tcp_pkts><max_tcp_pkts>50800</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1224"><ip.session_id>614</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71627402305603</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11472792128320307</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11472792128320307</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1225"><ip.session_id>614</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71628713607788</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147277486833661</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147277486833661</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8600</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8600</min_tcp_pkts><max_tcp_pkts>8600</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1226"><ip.session_id>615</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716313123703003</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11472740662340548</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11472740662340548</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1227"><ip.session_id>615</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71631908416748</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11472732816957362</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11472732816957362</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1947</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1947</min_tcp_pkts><max_tcp_pkts>1947</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1228"><ip.session_id>616</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.71635913848877</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0400543212890625</time_between_pkts_sum><time_between_pkts_avg>0.0400543212890625</time_between_pkts_avg><time_between_pkts_max>0.0400543212890625</time_between_pkts_max><time_between_pkts_min>0.0400543212890625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147268009626068</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147268009626068</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1229"><ip.session_id>616</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716365098953247</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147267225096033</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147267225096033</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2875</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2875</min_tcp_pkts><max_tcp_pkts>2875</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1230"><ip.session_id>617</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716628074645996</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.26297569274902344</time_between_pkts_sum><time_between_pkts_avg>0.26297569274902344</time_between_pkts_avg><time_between_pkts_max>0.26297569274902344</time_between_pkts_max><time_between_pkts_min>0.26297569274902344</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11472326126988187</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11472326126988187</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1231"><ip.session_id>617</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716634035110474</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11472318282171934</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11472318282171934</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10082</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10082</min_tcp_pkts><max_tcp_pkts>10082</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1232"><ip.session_id>618</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716695070266724</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.06103515625</time_between_pkts_sum><time_between_pkts_avg>0.06103515625</time_between_pkts_avg><time_between_pkts_max>0.06103515625</time_between_pkts_max><time_between_pkts_min>0.06103515625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11472237951870913</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11472237951870913</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1233"><ip.session_id>618</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716701030731201</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11472230107175248</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11472230107175248</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5087</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5087</min_tcp_pkts><max_tcp_pkts>5087</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1234"><ip.session_id>619</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716722965240479</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02193450927734375</time_between_pkts_sum><time_between_pkts_avg>0.02193450927734375</time_between_pkts_avg><time_between_pkts_max>0.02193450927734375</time_between_pkts_max><time_between_pkts_min>0.02193450927734375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11472201238787584</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11472201238787584</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1235"><ip.session_id>619</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716728925704956</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11472193394142127</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11472193394142127</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3493</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3493</min_tcp_pkts><max_tcp_pkts>3493</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1236"><ip.session_id>620</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.7167649269104</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03600120544433594</time_between_pkts_sum><time_between_pkts_avg>0.03600120544433594</time_between_pkts_avg><time_between_pkts_max>0.03600120544433594</time_between_pkts_max><time_between_pkts_min>0.03600120544433594</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1147214601271166</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1147214601271166</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1237"><ip.session_id>620</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716772079467773</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11472136599229033</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11472136599229033</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1100</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1100</min_tcp_pkts><max_tcp_pkts>1100</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1238"><ip.session_id>621</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716794967651367</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02288818359375</time_between_pkts_sum><time_between_pkts_avg>0.02288818359375</time_between_pkts_avg><time_between_pkts_max>0.02288818359375</time_between_pkts_max><time_between_pkts_min>0.02288818359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11472106476188434</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11472106476188434</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1239"><ip.session_id>621</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716800928115845</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11472098631672574</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11472098631672574</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>12174</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>12174</min_tcp_pkts><max_tcp_pkts>12174</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1240"><ip.session_id>622</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716871976852417</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.07104873657226562</time_between_pkts_sum><time_between_pkts_avg>0.07104873657226562</time_between_pkts_avg><time_between_pkts_max>0.07104873657226562</time_between_pkts_max><time_between_pkts_min>0.07104873657226562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.114720051258696</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.114720051258696</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1241"><ip.session_id>622</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.716877937316895</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11471997281492344</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11471997281492344</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5003</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5003</min_tcp_pkts><max_tcp_pkts>5003</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1242"><ip.session_id>623</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.746515035629272</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>29.63709831237793</time_between_pkts_sum><time_between_pkts_avg>29.63709831237793</time_between_pkts_avg><time_between_pkts_max>29.63709831237793</time_between_pkts_max><time_between_pkts_min>29.63709831237793</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11433125032386736</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11433125032386736</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1243"><ip.session_id>623</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.7465341091156</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.019073486328125</time_between_pkts_sum><time_between_pkts_avg>0.019073486328125</time_between_pkts_avg><time_between_pkts_max>0.019073486328125</time_between_pkts_max><time_between_pkts_min>0.019073486328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1143310010027634</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1143310010027634</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1165</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1165</min_tcp_pkts><max_tcp_pkts>1165</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1244"><ip.session_id>624</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.746515035629272</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11433125032386736</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11433125032386736</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1245"><ip.session_id>624</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.746549129486084</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015020370483398438</time_between_pkts_sum><time_between_pkts_avg>0.015020370483398438</time_between_pkts_avg><time_between_pkts_max>0.015020370483398438</time_between_pkts_max><time_between_pkts_min>0.015020370483398438</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11433080466315935</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11433080466315935</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>24800</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>24800</min_tcp_pkts><max_tcp_pkts>24800</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1246"><ip.session_id>625</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757261037826538</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>10.711908340454102</time_between_pkts_sum><time_between_pkts_avg>10.711908340454102</time_between_pkts_avg><time_between_pkts_max>10.711908340454102</time_between_pkts_max><time_between_pkts_min>10.711908340454102</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11419095487510895</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11419095487510895</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1247"><ip.session_id>625</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75727391242981</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.012874603271484375</time_between_pkts_sum><time_between_pkts_avg>0.012874603271484375</time_between_pkts_avg><time_between_pkts_max>0.012874603271484375</time_between_pkts_max><time_between_pkts_min>0.012874603271484375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11419078699601143</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11419078699601143</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8000</min_tcp_pkts><max_tcp_pkts>8000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1248"><ip.session_id>626</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757261037826538</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11419095487510895</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11419095487510895</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1249"><ip.session_id>626</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757282018661499</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11419068129461067</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11419068129461067</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1048</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1048</min_tcp_pkts><max_tcp_pkts>1048</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1250"><ip.session_id>627</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757290124893188</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1141905755934056</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1141905755934056</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1251"><ip.session_id>627</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757303953170776</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.013828277587890625</time_between_pkts_sum><time_between_pkts_avg>0.013828277587890625</time_between_pkts_avg><time_between_pkts_max>0.013828277587890625</time_between_pkts_max><time_between_pkts_min>0.013828277587890625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11419039528003681</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11419039528003681</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>16080</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>16080</min_tcp_pkts><max_tcp_pkts>16080</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1252"><ip.session_id>628</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757290124893188</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1141905755934056</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1141905755934056</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1253"><ip.session_id>628</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75731110572815</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11419030201472469</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11419030201472469</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>416</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>416</min_tcp_pkts><max_tcp_pkts>416</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1254"><ip.session_id>629</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757290124893188</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1141905755934056</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1141905755934056</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1255"><ip.session_id>629</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75731611251831</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11419023672909685</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11419023672909685</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1433</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1433</min_tcp_pkts><max_tcp_pkts>1433</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1256"><ip.session_id>630</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75731897354126</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1141901994230573</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1141901994230573</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1257"><ip.session_id>630</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75732707977295</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11419009372274433</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11419009372274433</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5666</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5666</min_tcp_pkts><max_tcp_pkts>5666</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1258"><ip.session_id>631</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75731897354126</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1141901994230573</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1141901994230573</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1259"><ip.session_id>631</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757333040237427</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11419001600205081</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11419001600205081</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2099</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2099</min_tcp_pkts><max_tcp_pkts>2099</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1260"><ip.session_id>632</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75731897354126</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1141901994230573</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1141901994230573</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1261"><ip.session_id>632</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757338047027588</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418995071675</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418995071675</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1147</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1147</min_tcp_pkts><max_tcp_pkts>1147</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1262"><ip.session_id>633</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757360935211182</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02288818359375</time_between_pkts_sum><time_between_pkts_avg>0.02288818359375</time_between_pkts_avg><time_between_pkts_max>0.02288818359375</time_between_pkts_max><time_between_pkts_min>0.02288818359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418965227061127</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418965227061127</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1263"><ip.session_id>633</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757368087768555</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418955900651286</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418955900651286</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>593</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>593</min_tcp_pkts><max_tcp_pkts>593</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1264"><ip.session_id>634</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757394075393677</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418922014823757</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418922014823757</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1265"><ip.session_id>634</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757403135299683</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418910201463273</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418910201463273</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>54045</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>54045</min_tcp_pkts><max_tcp_pkts>54045</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1266"><ip.session_id>635</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757408142089844</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418903673037703</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418903673037703</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1267"><ip.session_id>635</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757412910461426</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00476837158203125</time_between_pkts_sum><time_between_pkts_avg>0.00476837158203125</time_between_pkts_avg><time_between_pkts_max>0.00476837158203125</time_between_pkts_max><time_between_pkts_min>0.00476837158203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418897455496481</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418897455496481</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2040</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2040</min_tcp_pkts><max_tcp_pkts>2040</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1268"><ip.session_id>636</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75742793083191</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015020370483398438</time_between_pkts_sum><time_between_pkts_avg>0.015020370483398438</time_between_pkts_avg><time_between_pkts_max>0.015020370483398438</time_between_pkts_max><time_between_pkts_min>0.015020370483398438</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418877870285886</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418877870285886</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1269"><ip.session_id>636</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757436990737915</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1141886605701674</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1141886605701674</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1090</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1090</min_tcp_pkts><max_tcp_pkts>1090</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1270"><ip.session_id>637</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75742793083191</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418877870285886</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418877870285886</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1271"><ip.session_id>637</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757446050643921</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418854243772036</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418854243772036</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>20222</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>20222</min_tcp_pkts><max_tcp_pkts>20222</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1272"><ip.session_id>638</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757452964782715</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418845228417523</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418845228417523</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1273"><ip.session_id>638</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757463932037354</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418830928229219</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418830928229219</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>49165</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>49165</min_tcp_pkts><max_tcp_pkts>49165</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1274"><ip.session_id>639</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757452964782715</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418845228417523</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418845228417523</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1275"><ip.session_id>639</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75747013092041</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418822845529934</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418822845529934</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32769</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32769</min_tcp_pkts><max_tcp_pkts>32769</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1276"><ip.session_id>640</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757452964782715</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418845228417523</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418845228417523</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1277"><ip.session_id>640</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757475137710571</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418816317204249</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418816317204249</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9290</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9290</min_tcp_pkts><max_tcp_pkts>9290</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1278"><ip.session_id>641</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757478952407837</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418811343246833</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418811343246833</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1279"><ip.session_id>641</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757483005523682</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418806058421826</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418806058421826</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5950</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5950</min_tcp_pkts><max_tcp_pkts>5950</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1280"><ip.session_id>642</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75760793685913</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.12493133544921875</time_between_pkts_sum><time_between_pkts_avg>0.12493133544921875</time_between_pkts_avg><time_between_pkts_max>0.12493133544921875</time_between_pkts_max><time_between_pkts_min>0.12493133544921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418643163861987</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418643163861987</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1281"><ip.session_id>642</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757617950439453</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418630107628987</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418630107628987</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2401</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2401</min_tcp_pkts><max_tcp_pkts>2401</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1282"><ip.session_id>643</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75760793685913</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418643163861987</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418643163861987</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1283"><ip.session_id>643</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75762391090393</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.114186223360759</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.114186223360759</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>544</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>544</min_tcp_pkts><max_tcp_pkts>544</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1284"><ip.session_id>644</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75763201713562</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418611766780679</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418611766780679</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1285"><ip.session_id>644</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757673978805542</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.041961669921875</time_between_pkts_sum><time_between_pkts_avg>0.041961669921875</time_between_pkts_avg><time_between_pkts_max>0.041961669921875</time_between_pkts_max><time_between_pkts_min>0.041961669921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418557055447615</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418557055447615</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6</min_tcp_pkts><max_tcp_pkts>6</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1286"><ip.session_id>645</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75763201713562</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418611766780679</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418611766780679</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1287"><ip.session_id>645</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757682085037231</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418546486273243</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418546486273243</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1201</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1201</min_tcp_pkts><max_tcp_pkts>1201</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1288"><ip.session_id>646</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75763201713562</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418611766780679</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418611766780679</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1289"><ip.session_id>646</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757687091827393</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418539958263552</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418539958263552</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2049</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2049</min_tcp_pkts><max_tcp_pkts>2049</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1290"><ip.session_id>647</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75763201713562</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418611766780679</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418611766780679</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1291"><ip.session_id>647</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757689952850342</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418536227975651</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418536227975651</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3404</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3404</min_tcp_pkts><max_tcp_pkts>3404</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1292"><ip.session_id>648</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75763201713562</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418611766780679</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418611766780679</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1293"><ip.session_id>648</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75769591331482</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418528456550353</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418528456550353</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6881</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6881</min_tcp_pkts><max_tcp_pkts>6881</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1294"><ip.session_id>649</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757714033126831</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.01811981201171875</time_between_pkts_sum><time_between_pkts_avg>0.01811981201171875</time_between_pkts_avg><time_between_pkts_max>0.01811981201171875</time_between_pkts_max><time_between_pkts_min>0.01811981201171875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418504831482407</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418504831482407</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1295"><ip.session_id>649</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757724046707153</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418491775565746</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418491775565746</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2005</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2005</min_tcp_pkts><max_tcp_pkts>2005</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1296"><ip.session_id>650</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757714033126831</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418504831482407</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418504831482407</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1297"><ip.session_id>650</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75773000717163</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418484004200957</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418484004200957</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5825</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5825</min_tcp_pkts><max_tcp_pkts>5825</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1298"><ip.session_id>651</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757714033126831</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418504831482407</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418504831482407</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1299"><ip.session_id>651</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757735967636108</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418476232846746</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418476232846746</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>60020</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>60020</min_tcp_pkts><max_tcp_pkts>60020</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1300"><ip.session_id>652</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757764101028442</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.028133392333984375</time_between_pkts_sum><time_between_pkts_avg>0.028133392333984375</time_between_pkts_avg><time_between_pkts_max>0.028133392333984375</time_between_pkts_max><time_between_pkts_min>0.028133392333984375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418439552197665</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418439552197665</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1301"><ip.session_id>652</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75777006149292</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418431780903962</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418431780903962</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1998</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1998</min_tcp_pkts><max_tcp_pkts>1998</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1302"><ip.session_id>653</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757807970046997</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03790855407714844</time_between_pkts_sum><time_between_pkts_avg>0.03790855407714844</time_between_pkts_avg><time_between_pkts_max>0.03790855407714844</time_between_pkts_max><time_between_pkts_min>0.03790855407714844</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418382355723583</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418382355723583</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1303"><ip.session_id>653</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757817029953003</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418370543479672</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418370543479672</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>990</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>990</min_tcp_pkts><max_tcp_pkts>990</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1304"><ip.session_id>654</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757808923721313</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418381112328337</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418381112328337</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1305"><ip.session_id>654</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75782299041748</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418362772279901</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418362772279901</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>50003</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>50003</min_tcp_pkts><max_tcp_pkts>50003</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1306"><ip.session_id>655</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757863998413086</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04100799560546875</time_between_pkts_sum><time_between_pkts_avg>0.04100799560546875</time_between_pkts_avg><time_between_pkts_max>0.04100799560546875</time_between_pkts_max><time_between_pkts_min>0.04100799560546875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418309306712215</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418309306712215</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1307"><ip.session_id>655</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75787091255188</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418300292218155</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418300292218155</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1217</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1217</min_tcp_pkts><max_tcp_pkts>1217</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1308"><ip.session_id>656</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757877111434937</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418292210270062</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418292210270062</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1309"><ip.session_id>656</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757880926132202</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1141828723676923</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1141828723676923</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>987</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>987</min_tcp_pkts><max_tcp_pkts>987</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1310"><ip.session_id>657</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757889032363892</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418276668094347</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418276668094347</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1311"><ip.session_id>657</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757894039154053</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418270140393164</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418270140393164</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3031</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3031</min_tcp_pkts><max_tcp_pkts>3031</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1312"><ip.session_id>658</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757918119430542</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.024080276489257812</time_between_pkts_sum><time_between_pkts_avg>0.024080276489257812</time_between_pkts_avg><time_between_pkts_max>0.024080276489257812</time_between_pkts_max><time_between_pkts_min>0.024080276489257812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418238745363174</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418238745363174</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1313"><ip.session_id>658</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75792407989502</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418230974342802</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418230974342802</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2045</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2045</min_tcp_pkts><max_tcp_pkts>2045</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1314"><ip.session_id>659</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.757946968078613</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02288818359375</time_between_pkts_sum><time_between_pkts_avg>0.02288818359375</time_between_pkts_avg><time_between_pkts_max>0.02288818359375</time_between_pkts_max><time_between_pkts_min>0.02288818359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1141820113372287</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1141820113372287</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1315"><ip.session_id>659</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75795292854309</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11418193362753694</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11418193362753694</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1102</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1102</min_tcp_pkts><max_tcp_pkts>1102</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1316"><ip.session_id>660</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758172988891602</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.2200603485107422</time_between_pkts_sum><time_between_pkts_avg>0.2200603485107422</time_between_pkts_avg><time_between_pkts_max>0.2200603485107422</time_between_pkts_max><time_between_pkts_min>0.2200603485107422</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417906465975798</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417906465975798</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1317"><ip.session_id>660</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758180141448975</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417897141295355</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417897141295355</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>146</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>146</min_tcp_pkts><max_tcp_pkts>146</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1318"><ip.session_id>661</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758270025253296</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.08988380432128906</time_between_pkts_sum><time_between_pkts_avg>0.08988380432128906</time_between_pkts_avg><time_between_pkts_max>0.08988380432128906</time_between_pkts_max><time_between_pkts_min>0.08988380432128906</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417779962442745</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417779962442745</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1319"><ip.session_id>661</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75827693939209</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417770948784474</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417770948784474</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9999</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9999</min_tcp_pkts><max_tcp_pkts>9999</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1320"><ip.session_id>662</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758283138275146</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1141776286758571</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1141776286758571</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1321"><ip.session_id>662</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758312940597534</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.029802322387695312</time_between_pkts_sum><time_between_pkts_avg>0.029802322387695312</time_between_pkts_avg><time_between_pkts_max>0.029802322387695312</time_between_pkts_max><time_between_pkts_min>0.029802322387695312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417724015828272</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417724015828272</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>50636</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>50636</min_tcp_pkts><max_tcp_pkts>50636</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1322"><ip.session_id>663</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758363962173462</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.051021575927734375</time_between_pkts_sum><time_between_pkts_avg>0.051021575927734375</time_between_pkts_avg><time_between_pkts_max>0.051021575927734375</time_between_pkts_max><time_between_pkts_min>0.051021575927734375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417657502233346</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417657502233346</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1323"><ip.session_id>663</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758372068405151</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417646934724185</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417646934724185</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6566</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6566</min_tcp_pkts><max_tcp_pkts>6566</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1324"><ip.session_id>664</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758570909500122</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.19884109497070312</time_between_pkts_sum><time_between_pkts_avg>0.19884109497070312</time_between_pkts_avg><time_between_pkts_max>0.19884109497070312</time_between_pkts_max><time_between_pkts_min>0.19884109497070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417387726065381</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417387726065381</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1325"><ip.session_id>664</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758579015731812</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417377159055593</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417377159055593</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2001</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2001</min_tcp_pkts><max_tcp_pkts>2001</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1326"><ip.session_id>665</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758570909500122</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417387726065381</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417387726065381</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1327"><ip.session_id>665</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758587121963501</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417366592065364</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417366592065364</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5718</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5718</min_tcp_pkts><max_tcp_pkts>5718</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1328"><ip.session_id>666</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75858998298645</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417362862544071</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417362862544071</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1329"><ip.session_id>666</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758597135543823</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417353538751497</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417353538751497</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>100</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>100</min_tcp_pkts><max_tcp_pkts>100</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1330"><ip.session_id>667</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.7586030960083</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417345768935985</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417345768935985</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1331"><ip.session_id>667</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758611917495728</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417334269628436</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417334269628436</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>20</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>20</min_tcp_pkts><max_tcp_pkts>20</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1332"><ip.session_id>668</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.7586030960083</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417345768935985</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417345768935985</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1333"><ip.session_id>668</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758618116378784</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.114173261890478</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.114173261890478</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1875</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1875</min_tcp_pkts><max_tcp_pkts>1875</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1334"><ip.session_id>669</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.7586030960083</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417345768935985</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417345768935985</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1335"><ip.session_id>669</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758623123168945</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417319662433327</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417319662433327</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6106</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6106</min_tcp_pkts><max_tcp_pkts>6106</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1336"><ip.session_id>670</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758633136749268</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417306609226768</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417306609226768</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1337"><ip.session_id>670</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758647918701172</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014781951904296875</time_between_pkts_sum><time_between_pkts_avg>0.014781951904296875</time_between_pkts_avg><time_between_pkts_max>0.014781951904296875</time_between_pkts_max><time_between_pkts_min>0.014781951904296875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417287340262114</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417287340262114</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8093</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8093</min_tcp_pkts><max_tcp_pkts>8093</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1338"><ip.session_id>671</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758633136749268</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417306609226768</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417306609226768</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1339"><ip.session_id>671</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758655071258545</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417278016592888</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417278016592888</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9877</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9877</min_tcp_pkts><max_tcp_pkts>9877</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1340"><ip.session_id>672</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758633136749268</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417306609226768</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417306609226768</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1341"><ip.session_id>672</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758660078048706</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417271490033491</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417271490033491</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>34571</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>34571</min_tcp_pkts><max_tcp_pkts>34571</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1342"><ip.session_id>673</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758633136749268</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417306609226768</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417306609226768</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1343"><ip.session_id>673</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758662939071655</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417267760574328</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417267760574328</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2381</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2381</min_tcp_pkts><max_tcp_pkts>2381</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1344"><ip.session_id>674</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758633136749268</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417306609226768</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417306609226768</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1345"><ip.session_id>674</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758667945861816</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417261234026656</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417261234026656</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4003</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4003</min_tcp_pkts><max_tcp_pkts>4003</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1346"><ip.session_id>675</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758633136749268</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417306609226768</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417306609226768</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1347"><ip.session_id>675</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758671045303345</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417257193786598</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417257193786598</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2702</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2702</min_tcp_pkts><max_tcp_pkts>2702</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1348"><ip.session_id>676</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758687019348145</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015974044799804688</time_between_pkts_sum><time_between_pkts_avg>0.015974044799804688</time_between_pkts_avg><time_between_pkts_max>0.015974044799804688</time_between_pkts_max><time_between_pkts_min>0.015974044799804688</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417236371056262</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417236371056262</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1349"><ip.session_id>676</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758692979812622</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417228601400221</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417228601400221</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6969</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6969</min_tcp_pkts><max_tcp_pkts>6969</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1350"><ip.session_id>677</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758687019348145</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417236371056262</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417236371056262</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1351"><ip.session_id>677</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.7586989402771</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417220831754755</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417220831754755</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>631</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>631</min_tcp_pkts><max_tcp_pkts>631</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1352"><ip.session_id>678</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758702039718628</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417216791543291</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417216791543291</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1353"><ip.session_id>678</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758707046508789</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417210265053891</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417210265053891</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>902</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>902</min_tcp_pkts><max_tcp_pkts>902</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1354"><ip.session_id>679</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758702039718628</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417216791543291</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417216791543291</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1355"><ip.session_id>679</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75871205329895</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417203738571953</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417203738571953</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1023</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1023</min_tcp_pkts><max_tcp_pkts>1023</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1356"><ip.session_id>680</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758733034133911</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417176389585927</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417176389585927</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1357"><ip.session_id>680</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.7587411403656</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417165822967326</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417165822967326</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10566</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10566</min_tcp_pkts><max_tcp_pkts>10566</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1358"><ip.session_id>681</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758746147155762</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417159296536197</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417159296536197</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1359"><ip.session_id>681</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758749961853027</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1141715432402225</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1141715432402225</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32776</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32776</min_tcp_pkts><max_tcp_pkts>32776</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1360"><ip.session_id>682</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758786916732788</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03695487976074219</time_between_pkts_sum><time_between_pkts_avg>0.03695487976074219</time_between_pkts_avg><time_between_pkts_max>0.03695487976074219</time_between_pkts_max><time_between_pkts_min>0.03695487976074219</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417106153017603</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417106153017603</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1361"><ip.session_id>682</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758794069290161</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.114170968296443</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.114170968296443</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2007</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2007</min_tcp_pkts><max_tcp_pkts>2007</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1362"><ip.session_id>683</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758799076080322</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417090303292049</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417090303292049</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1363"><ip.session_id>683</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.7588050365448</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1141708253383481</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1141708253383481</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32783</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32783</min_tcp_pkts><max_tcp_pkts>32783</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1364"><ip.session_id>684</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758799076080322</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417090303292049</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417090303292049</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1365"><ip.session_id>684</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758810043334961</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417076007498903</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417076007498903</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6788</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6788</min_tcp_pkts><max_tcp_pkts>6788</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1366"><ip.session_id>685</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758816003799438</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1141706823806112</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1141706823806112</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1367"><ip.session_id>685</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758822917938232</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417059225526542</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417059225526542</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6123</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6123</min_tcp_pkts><max_tcp_pkts>6123</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1368"><ip.session_id>686</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758816003799438</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1141706823806112</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1141706823806112</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1369"><ip.session_id>686</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758830070495605</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417049902229881</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417049902229881</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5222</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5222</min_tcp_pkts><max_tcp_pkts>5222</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1370"><ip.session_id>687</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758844137191772</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014066696166992188</time_between_pkts_sum><time_between_pkts_avg>0.014066696166992188</time_between_pkts_avg><time_between_pkts_max>0.014066696166992188</time_between_pkts_max><time_between_pkts_min>0.014066696166992188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417031566457538</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417031566457538</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1371"><ip.session_id>687</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758858919143677</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014781951904296875</time_between_pkts_sum><time_between_pkts_avg>0.014781951904296875</time_between_pkts_avg><time_between_pkts_max>0.014781951904296875</time_between_pkts_max><time_between_pkts_min>0.014781951904296875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417012298421249</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417012298421249</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>13456</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>13456</min_tcp_pkts><max_tcp_pkts>13456</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1372"><ip.session_id>688</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758862972259521</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11417007015261368</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11417007015261368</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1373"><ip.session_id>688</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758868932723999</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416999245917486</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416999245917486</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5989</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5989</min_tcp_pkts><max_tcp_pkts>5989</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1374"><ip.session_id>689</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758872985839844</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416993962769688</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416993962769688</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1375"><ip.session_id>689</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758877038955688</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416988679626777</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416988679626777</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9876</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9876</min_tcp_pkts><max_tcp_pkts>9876</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1376"><ip.session_id>690</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758942127227783</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.06508827209472656</time_between_pkts_sum><time_between_pkts_avg>0.06508827209472656</time_between_pkts_avg><time_between_pkts_max>0.06508827209472656</time_between_pkts_max><time_between_pkts_min>0.06508827209472656</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416903839236821</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416903839236821</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1377"><ip.session_id>690</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758952140808105</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1141689078698105</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1141689078698105</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32774</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32774</min_tcp_pkts><max_tcp_pkts>32774</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1378"><ip.session_id>691</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758942127227783</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416903839236821</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416903839236821</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1379"><ip.session_id>691</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758957147598267</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416884260864356</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416884260864356</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>541</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>541</min_tcp_pkts><max_tcp_pkts>541</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1380"><ip.session_id>692</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758960962295532</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416879288589978</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416879288589978</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1381"><ip.session_id>692</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758968114852905</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416869965587192</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416869965587192</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>56737</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>56737</min_tcp_pkts><max_tcp_pkts>56737</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1382"><ip.session_id>693</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758960962295532</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416879288589978</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416879288589978</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1383"><ip.session_id>693</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758973121643066</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416863439494301</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416863439494301</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8045</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8045</min_tcp_pkts><max_tcp_pkts>8045</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1384"><ip.session_id>694</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758978128433228</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416856913408872</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416856913408872</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1385"><ip.session_id>694</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.758986949920654</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416845415086031</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416845415086031</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>212</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>212</min_tcp_pkts><max_tcp_pkts>212</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1386"><ip.session_id>695</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759015083312988</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.028133392333984375</time_between_pkts_sum><time_between_pkts_avg>0.028133392333984375</time_between_pkts_avg><time_between_pkts_max>0.028133392333984375</time_between_pkts_max><time_between_pkts_min>0.028133392333984375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416808744913845</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416808744913845</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1387"><ip.session_id>695</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759022951126099</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416798489738351</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416798489738351</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1718</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1718</min_tcp_pkts><max_tcp_pkts>1718</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1388"><ip.session_id>696</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759015083312988</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416808744913845</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416808744913845</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1389"><ip.session_id>696</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759031057357788</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416787923819233</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416787923819233</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3017</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3017</min_tcp_pkts><max_tcp_pkts>3017</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1390"><ip.session_id>697</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759051084518433</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02002716064453125</time_between_pkts_sum><time_between_pkts_avg>0.02002716064453125</time_between_pkts_avg><time_between_pkts_max>0.02002716064453125</time_between_pkts_max><time_between_pkts_min>0.02002716064453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416761819867607</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416761819867607</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1391"><ip.session_id>697</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759057998657227</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416752807816789</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416752807816789</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2000</min_tcp_pkts><max_tcp_pkts>2000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1392"><ip.session_id>698</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759089946746826</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.031948089599609375</time_between_pkts_sum><time_between_pkts_avg>0.031948089599609375</time_between_pkts_avg><time_between_pkts_max>0.031948089599609375</time_between_pkts_max><time_between_pkts_min>0.031948089599609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1141671116611156</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1141671116611156</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1393"><ip.session_id>698</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759096145629883</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416703086412898</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416703086412898</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3809</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3809</min_tcp_pkts><max_tcp_pkts>3809</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1394"><ip.session_id>699</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.75910210609436</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416695317482661</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416695317482661</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1395"><ip.session_id>699</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759107112884521</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416688791589434</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416688791589434</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7</min_tcp_pkts><max_tcp_pkts>7</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1396"><ip.session_id>700</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759130001068115</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02288818359375</time_between_pkts_sum><time_between_pkts_avg>0.02288818359375</time_between_pkts_avg><time_between_pkts_max>0.02288818359375</time_between_pkts_max><time_between_pkts_min>0.02288818359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416658959029687</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416658959029687</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1397"><ip.session_id>700</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759135961532593</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416651190159506</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416651190159506</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1300</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1300</min_tcp_pkts><max_tcp_pkts>1300</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1398"><ip.session_id>701</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759174108505249</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03814697265625</time_between_pkts_sum><time_between_pkts_avg>0.03814697265625</time_between_pkts_avg><time_between_pkts_max>0.03814697265625</time_between_pkts_max><time_between_pkts_min>0.03814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416601469640723</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416601469640723</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1399"><ip.session_id>701</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759182929992676</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1141658997183241</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1141658997183241</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9502</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9502</min_tcp_pkts><max_tcp_pkts>9502</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1400"><ip.session_id>702</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759174108505249</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416601469640723</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416601469640723</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1401"><ip.session_id>702</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759189128875732</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416581892305286</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416581892305286</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5544</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5544</min_tcp_pkts><max_tcp_pkts>5544</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1402"><ip.session_id>703</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759216070175171</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.026941299438476562</time_between_pkts_sum><time_between_pkts_avg>0.026941299438476562</time_between_pkts_avg><time_between_pkts_max>0.026941299438476562</time_between_pkts_max><time_between_pkts_min>0.026941299438476562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416546777570262</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416546777570262</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1403"><ip.session_id>703</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759223937988281</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416536522865388</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416536522865388</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9485</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9485</min_tcp_pkts><max_tcp_pkts>9485</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1404"><ip.session_id>704</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759216070175171</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416546777570262</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416546777570262</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1405"><ip.session_id>704</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.759231090545654</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11416527200422397</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11416527200422397</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1169</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1169</min_tcp_pkts><max_tcp_pkts>1169</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1406"><ip.session_id>705</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.778639078140259</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>19.407987594604492</time_between_pkts_sum><time_between_pkts_avg>19.407987594604492</time_between_pkts_avg><time_between_pkts_max>19.407987594604492</time_between_pkts_max><time_between_pkts_min>19.407987594604492</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11391287317986519</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11391287317986519</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1407"><ip.session_id>705</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.778653144836426</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014066696166992188</time_between_pkts_sum><time_between_pkts_avg>0.014066696166992188</time_between_pkts_avg><time_between_pkts_max>0.014066696166992188</time_between_pkts_max><time_between_pkts_min>0.014066696166992188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11391269064870123</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11391269064870123</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3784</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3784</min_tcp_pkts><max_tcp_pkts>3784</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1408"><ip.session_id>706</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.778661966323853</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11391257618030363</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11391257618030363</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1409"><ip.session_id>706</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.778666973114014</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.113912511211856</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.113912511211856</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>49161</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>49161</min_tcp_pkts><max_tcp_pkts>49161</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1410"><ip.session_id>707</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.793580055236816</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>14.913082122802734</time_between_pkts_sum><time_between_pkts_avg>14.913082122802734</time_between_pkts_avg><time_between_pkts_max>14.913082122802734</time_between_pkts_max><time_between_pkts_min>14.913082122802734</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.113719326340183</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.113719326340183</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1411"><ip.session_id>707</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.793589115142822</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1137192091768275</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1137192091768275</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6669</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6669</min_tcp_pkts><max_tcp_pkts>6669</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1412"><ip.session_id>708</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.793781042098999</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.1919269561767578</time_between_pkts_sum><time_between_pkts_avg>0.1919269561767578</time_between_pkts_avg><time_between_pkts_max>0.1919269561767578</time_between_pkts_max><time_between_pkts_min>0.1919269561767578</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371672722036626</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371672722036626</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1413"><ip.session_id>708</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.793787956237793</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371663781029188</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371663781029188</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9071</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9071</min_tcp_pkts><max_tcp_pkts>9071</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1414"><ip.session_id>709</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.793822050094604</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03409385681152344</time_between_pkts_sum><time_between_pkts_avg>0.03409385681152344</time_between_pkts_avg><time_between_pkts_max>0.03409385681152344</time_between_pkts_max><time_between_pkts_min>0.03409385681152344</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.113716196928188</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.113716196928188</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1415"><ip.session_id>709</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79383111000061</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371607977128077</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371607977128077</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1043</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1043</min_tcp_pkts><max_tcp_pkts>1043</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1416"><ip.session_id>710</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.793822050094604</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.113716196928188</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.113716196928188</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1417"><ip.session_id>710</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.793838024139404</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371599036222452</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371599036222452</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10024</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10024</min_tcp_pkts><max_tcp_pkts>10024</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1418"><ip.session_id>711</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.793842077255249</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371593795008449</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371593795008449</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1419"><ip.session_id>711</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.793853998184204</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.011920928955078125</time_between_pkts_max><time_between_pkts_min>0.011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371578379701149</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371578379701149</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2604</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2604</min_tcp_pkts><max_tcp_pkts>2604</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1420"><ip.session_id>712</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.793842077255249</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371593795008449</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371593795008449</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1421"><ip.session_id>712</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.793859958648682</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1137157067206317</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1137157067206317</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2383</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2383</min_tcp_pkts><max_tcp_pkts>2383</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1422"><ip.session_id>713</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.793874025344849</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014066696166992188</time_between_pkts_sum><time_between_pkts_avg>0.014066696166992188</time_between_pkts_avg><time_between_pkts_max>0.014066696166992188</time_between_pkts_max><time_between_pkts_min>0.014066696166992188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1137155248207897</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1137155248207897</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1423"><ip.session_id>713</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79387903213501</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371546007691857</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371546007691857</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5190</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5190</min_tcp_pkts><max_tcp_pkts>5190</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1424"><ip.session_id>714</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.793885946273804</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371537066883677</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371537066883677</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1425"><ip.session_id>714</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.793889999389648</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371531825726798</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371531825726798</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7921</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7921</min_tcp_pkts><max_tcp_pkts>7921</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1426"><ip.session_id>715</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.793910026550293</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02002716064453125</time_between_pkts_sum><time_between_pkts_avg>0.02002716064453125</time_between_pkts_avg><time_between_pkts_max>0.02002716064453125</time_between_pkts_max><time_between_pkts_min>0.02002716064453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371505928316664</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371505928316664</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1427"><ip.session_id>715</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79391598701477</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.113714982207769</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.113714982207769</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9040</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9040</min_tcp_pkts><max_tcp_pkts>9040</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1428"><ip.session_id>716</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79396104812622</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04506111145019531</time_between_pkts_sum><time_between_pkts_avg>0.04506111145019531</time_between_pkts_avg><time_between_pkts_max>0.04506111145019531</time_between_pkts_max><time_between_pkts_min>0.04506111145019531</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371439952114362</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371439952114362</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1429"><ip.session_id>716</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.793967008590698</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371432244664036</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371432244664036</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>54328</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>54328</min_tcp_pkts><max_tcp_pkts>54328</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1430"><ip.session_id>717</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79397201538086</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371425770413836</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371425770413836</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1431"><ip.session_id>717</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79397702217102</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371419296171008</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371419296171008</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1198</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1198</min_tcp_pkts><max_tcp_pkts>1198</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1432"><ip.session_id>718</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794012069702148</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03504753112792969</time_between_pkts_sum><time_between_pkts_avg>0.03504753112792969</time_between_pkts_avg><time_between_pkts_max>0.03504753112792969</time_between_pkts_max><time_between_pkts_min>0.03504753112792969</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1137137397667763</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1137137397667763</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1433"><ip.session_id>718</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794019937515259</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371363802963459</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371363802963459</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>12345</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>12345</min_tcp_pkts><max_tcp_pkts>12345</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1434"><ip.session_id>719</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794023990631104</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371358561966295</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371358561966295</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1435"><ip.session_id>719</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794028043746948</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1137135332097396</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1137135332097396</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5850</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5850</min_tcp_pkts><max_tcp_pkts>5850</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1436"><ip.session_id>720</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794222116470337</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.19407272338867188</time_between_pkts_sum><time_between_pkts_avg>0.19407272338867188</time_between_pkts_avg><time_between_pkts_max>0.19407272338867188</time_between_pkts_max><time_between_pkts_min>0.19407272338867188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371102375582953</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371102375582953</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1437"><ip.session_id>720</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794229984283447</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371092202354768</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371092202354768</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9110</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9110</min_tcp_pkts><max_tcp_pkts>9110</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1438"><ip.session_id>721</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794222116470337</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371102375582953</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371102375582953</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1439"><ip.session_id>721</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79423713684082</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371082953981304</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371082953981304</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5987</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5987</min_tcp_pkts><max_tcp_pkts>5987</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1440"><ip.session_id>722</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794244050979614</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371074013901256</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371074013901256</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1441"><ip.session_id>722</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794251918792725</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371063840723818</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371063840723818</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1036</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1036</min_tcp_pkts><max_tcp_pkts>1036</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1442"><ip.session_id>723</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794244050979614</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371074013901256</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371074013901256</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1443"><ip.session_id>723</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794259071350098</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371054592396487</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371054592396487</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4550</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4550</min_tcp_pkts><max_tcp_pkts>4550</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1444"><ip.session_id>724</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794244050979614</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371074013901256</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371074013901256</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1445"><ip.session_id>724</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794264078140259</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371048118576309</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371048118576309</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2004</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2004</min_tcp_pkts><max_tcp_pkts>2004</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1446"><ip.session_id>725</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79426908493042</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.113710416447635</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.113710416447635</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1447"><ip.session_id>725</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794274091720581</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11371035170958063</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11371035170958063</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3077</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3077</min_tcp_pkts><max_tcp_pkts>3077</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1448"><ip.session_id>726</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79426908493042</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.113710416447635</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.113710416447635</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1449"><ip.session_id>726</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794280052185059</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1137102746405644</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1137102746405644</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1145</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1145</min_tcp_pkts><max_tcp_pkts>1145</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1450"><ip.session_id>727</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794342041015625</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.06198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.06198883056640625</time_between_pkts_avg><time_between_pkts_max>0.06198883056640625</time_between_pkts_max><time_between_pkts_min>0.06198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11370947312898849</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11370947312898849</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1451"><ip.session_id>727</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794350147247314</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11370936831677167</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11370936831677167</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>25734</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>25734</min_tcp_pkts><max_tcp_pkts>25734</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1452"><ip.session_id>728</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794374942779541</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0247955322265625</time_between_pkts_sum><time_between_pkts_avg>0.0247955322265625</time_between_pkts_avg><time_between_pkts_max>0.0247955322265625</time_between_pkts_max><time_between_pkts_min>0.0247955322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11370904771589611</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11370904771589611</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1453"><ip.session_id>728</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794384002685547</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11370893057371947</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11370893057371947</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8333</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8333</min_tcp_pkts><max_tcp_pkts>8333</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1454"><ip.session_id>729</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794374942779541</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11370904771589611</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11370904771589611</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1455"><ip.session_id>729</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794389009475708</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11370886583735698</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11370886583735698</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3324</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3324</min_tcp_pkts><max_tcp_pkts>3324</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1456"><ip.session_id>730</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79450511932373</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.11610984802246094</time_between_pkts_sum><time_between_pkts_avg>0.11610984802246094</time_between_pkts_avg><time_between_pkts_max>0.11610984802246094</time_between_pkts_max><time_between_pkts_min>0.11610984802246094</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11370736459095913</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11370736459095913</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1457"><ip.session_id>730</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79451298713684</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11370726286522456</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11370726286522456</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6502</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6502</min_tcp_pkts><max_tcp_pkts>6502</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1458"><ip.session_id>731</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794517993927002</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11370719813076095</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11370719813076095</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1459"><ip.session_id>731</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.794523000717163</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11370713339637106</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11370713339637106</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4242</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4242</min_tcp_pkts><max_tcp_pkts>4242</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1460"><ip.session_id>732</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795418977737427</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.8959770202636719</time_between_pkts_sum><time_between_pkts_avg>0.8959770202636719</time_between_pkts_avg><time_between_pkts_max>0.8959770202636719</time_between_pkts_max><time_between_pkts_min>0.8959770202636719</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1136955502098485</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1136955502098485</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1461"><ip.session_id>732</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795428037643433</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369543309548025</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369543309548025</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6007</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6007</min_tcp_pkts><max_tcp_pkts>6007</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1462"><ip.session_id>733</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795433044433594</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1136953683744855</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1136953683744855</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1463"><ip.session_id>733</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795437097549438</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369531598135325</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369531598135325</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6567</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6567</min_tcp_pkts><max_tcp_pkts>6567</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1464"><ip.session_id>734</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.7954580783844</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369504477061708</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369504477061708</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1465"><ip.session_id>734</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795469999313354</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.011920928955078125</time_between_pkts_max><time_between_pkts_min>0.011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369489067418434</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369489067418434</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>259</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>259</min_tcp_pkts><max_tcp_pkts>259</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1466"><ip.session_id>735</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.7954580783844</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369504477061708</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369504477061708</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1467"><ip.session_id>735</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795476913452148</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369480129844474</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369480129844474</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1151</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1151</min_tcp_pkts><max_tcp_pkts>1151</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1468"><ip.session_id>736</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795480966567993</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369474890583513</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369474890583513</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1469"><ip.session_id>736</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795488119125366</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369465644840655</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369465644840655</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9418</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9418</min_tcp_pkts><max_tcp_pkts>9418</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1470"><ip.session_id>737</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795493125915527</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369459172829602</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369459172829602</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1471"><ip.session_id>737</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795498132705688</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369452700825917</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369452700825917</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>711</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>711</min_tcp_pkts><max_tcp_pkts>711</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1472"><ip.session_id>738</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795504093170166</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369444996069233</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369444996069233</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1473"><ip.session_id>738</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795509099960327</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369438524081689</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369438524081689</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1082</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1082</min_tcp_pkts><max_tcp_pkts>1082</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1474"><ip.session_id>739</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795514106750488</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369432052101512</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369432052101512</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1475"><ip.session_id>739</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795517921447754</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369427121073943</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369427121073943</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10626</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10626</min_tcp_pkts><max_tcp_pkts>10626</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1476"><ip.session_id>740</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795541048049927</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.023126602172851562</time_between_pkts_sum><time_between_pkts_avg>0.023126602172851562</time_between_pkts_avg><time_between_pkts_max>0.023126602172851562</time_between_pkts_max><time_between_pkts_min>0.023126602172851562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369397226810869</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369397226810869</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1477"><ip.session_id>740</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795573949813843</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.032901763916015625</time_between_pkts_sum><time_between_pkts_avg>0.032901763916015625</time_between_pkts_avg><time_between_pkts_max>0.032901763916015625</time_between_pkts_max><time_between_pkts_min>0.032901763916015625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369354697099271</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369354697099271</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2393</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2393</min_tcp_pkts><max_tcp_pkts>2393</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1478"><ip.session_id>741</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795541048049927</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369397226810869</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369397226810869</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1479"><ip.session_id>741</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795582056045532</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369344218813383</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369344218813383</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5862</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5862</min_tcp_pkts><max_tcp_pkts>5862</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1480"><ip.session_id>742</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79558801651001</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369336514203729</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369336514203729</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1481"><ip.session_id>742</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795594930648804</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369327576869612</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369327576869612</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10628</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10628</min_tcp_pkts><max_tcp_pkts>10628</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1482"><ip.session_id>743</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795630931854248</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03600120544433594</time_between_pkts_sum><time_between_pkts_avg>0.03600120544433594</time_between_pkts_avg><time_between_pkts_max>0.03600120544433594</time_between_pkts_max><time_between_pkts_min>0.03600120544433594</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369281041322471</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369281041322471</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1483"><ip.session_id>743</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795637130737305</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369273028617699</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369273028617699</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1721</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1721</min_tcp_pkts><max_tcp_pkts>1721</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1484"><ip.session_id>744</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795643091201782</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1136926532410453</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1136926532410453</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1485"><ip.session_id>744</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795650959014893</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369255154163137</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369255154163137</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10778</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10778</min_tcp_pkts><max_tcp_pkts>10778</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1486"><ip.session_id>745</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795643091201782</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1136926532410453</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1136926532410453</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1487"><ip.session_id>745</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795660972595215</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369242210627677</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369242210627677</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3814</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3814</min_tcp_pkts><max_tcp_pkts>3814</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1488"><ip.session_id>746</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795643091201782</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1136926532410453</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1136926532410453</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1489"><ip.session_id>746</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795669078826904</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369231732549129</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369231732549129</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1</min_tcp_pkts><max_tcp_pkts>1</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1490"><ip.session_id>747</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795674085617065</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369225260804379</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369225260804379</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1491"><ip.session_id>747</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795680046081543</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369217556355951</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369217556355951</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1038</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1038</min_tcp_pkts><max_tcp_pkts>1038</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1492"><ip.session_id>748</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79568600654602</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369209851917965</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369209851917965</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1493"><ip.session_id>748</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795695066452026</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369198141192224</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369198141192224</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5800</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5800</min_tcp_pkts><max_tcp_pkts>5800</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1494"><ip.session_id>749</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79568600654602</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369209851917965</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369209851917965</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1495"><ip.session_id>749</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79570198059082</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369189204075654</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369189204075654</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>636</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>636</min_tcp_pkts><max_tcp_pkts>636</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1496"><ip.session_id>750</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79568600654602</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369209851917965</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369209851917965</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1497"><ip.session_id>750</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795706987380981</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369182732379322</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369182732379322</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10616</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10616</min_tcp_pkts><max_tcp_pkts>10616</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1498"><ip.session_id>751</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79568600654602</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369209851917965</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369209851917965</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1499"><ip.session_id>751</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795732021331787</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025033950805664062</time_between_pkts_sum><time_between_pkts_avg>0.025033950805664062</time_between_pkts_avg><time_between_pkts_max>0.025033950805664062</time_between_pkts_max><time_between_pkts_min>0.025033950805664062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369150374008179</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369150374008179</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1064</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1064</min_tcp_pkts><max_tcp_pkts>1064</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1500"><ip.session_id>752</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795741081237793</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369138663404967</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369138663404967</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1501"><ip.session_id>752</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795751094818115</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369125720134747</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369125720134747</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5101</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5101</min_tcp_pkts><max_tcp_pkts>5101</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1502"><ip.session_id>753</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795741081237793</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369138663404967</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369138663404967</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1503"><ip.session_id>753</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79575800895691</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369116783132034</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369116783132034</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8083</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8083</min_tcp_pkts><max_tcp_pkts>8083</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1504"><ip.session_id>754</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795741081237793</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369138663404967</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369138663404967</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1505"><ip.session_id>754</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79576301574707</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1136911031151815</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1136911031151815</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>11111</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>11111</min_tcp_pkts><max_tcp_pkts>11111</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1506"><ip.session_id>755</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795766115188599</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369106305284676</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369106305284676</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1507"><ip.session_id>755</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795768976211548</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369102607225515</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369102607225515</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5915</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5915</min_tcp_pkts><max_tcp_pkts>5915</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1508"><ip.session_id>756</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79579496383667</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369069016631629</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369069016631629</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1509"><ip.session_id>756</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795805931091309</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369054840844227</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369054840844227</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3880</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3880</min_tcp_pkts><max_tcp_pkts>3880</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1510"><ip.session_id>757</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79579496383667</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369069016631629</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369069016631629</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1511"><ip.session_id>757</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795813083648682</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369045595784531</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369045595784531</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5802</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5802</min_tcp_pkts><max_tcp_pkts>5802</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1512"><ip.session_id>758</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79579496383667</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369069016631629</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369069016631629</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1513"><ip.session_id>758</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795818090438843</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369039124251691</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369039124251691</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1434</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1434</min_tcp_pkts><max_tcp_pkts>1434</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1514"><ip.session_id>759</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79579496383667</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369069016631629</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369069016631629</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1515"><ip.session_id>759</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.795825004577637</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11369030187385118</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11369030187385118</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>407</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>407</min_tcp_pkts><max_tcp_pkts>407</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1516"><ip.session_id>760</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796702146530151</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.8771419525146484</time_between_pkts_sum><time_between_pkts_avg>0.8771419525146484</time_between_pkts_avg><time_between_pkts_max>0.8771419525146484</time_between_pkts_max><time_between_pkts_min>0.8771419525146484</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367896551941897</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367896551941897</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1517"><ip.session_id>760</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796709060668945</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367887616871519</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367887616871519</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1085</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1085</min_tcp_pkts><max_tcp_pkts>1085</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1518"><ip.session_id>761</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.7967209815979</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.011920928955078125</time_between_pkts_max><time_between_pkts_min>0.011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367872211610748</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367872211610748</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1519"><ip.session_id>761</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796725988388062</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367865741413676</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367865741413676</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5298</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5298</min_tcp_pkts><max_tcp_pkts>5298</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1520"><ip.session_id>762</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796734094619751</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367855265872126</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367855265872126</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1521"><ip.session_id>762</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796741008758545</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367846330866647</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367846330866647</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5903</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5903</min_tcp_pkts><max_tcp_pkts>5903</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1522"><ip.session_id>763</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796734094619751</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367855265872126</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367855265872126</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1523"><ip.session_id>763</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796746969223022</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367838628286993</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367838628286993</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1801</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1801</min_tcp_pkts><max_tcp_pkts>1801</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1524"><ip.session_id>764</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796751976013184</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367832158128148</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367832158128148</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1525"><ip.session_id>764</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796756029129028</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367826920385907</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367826920385907</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3269</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3269</min_tcp_pkts><max_tcp_pkts>3269</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1526"><ip.session_id>765</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79679012298584</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03409385681152344</time_between_pkts_sum><time_between_pkts_avg>0.03409385681152344</time_between_pkts_avg><time_between_pkts_max>0.03409385681152344</time_between_pkts_max><time_between_pkts_min>0.03409385681152344</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367782861921642</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367782861921642</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1527"><ip.session_id>765</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796796083450317</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367775159427995</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367775159427995</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>19801</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>19801</min_tcp_pkts><max_tcp_pkts>19801</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1528"><ip.session_id>766</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796824932098389</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.028848648071289062</time_between_pkts_sum><time_between_pkts_avg>0.028848648071289062</time_between_pkts_avg><time_between_pkts_max>0.028848648071289062</time_between_pkts_max><time_between_pkts_min>0.028848648071289062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367737879506268</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367737879506268</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1529"><ip.session_id>766</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796831130981445</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367729868976488</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367729868976488</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1123</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1123</min_tcp_pkts><max_tcp_pkts>1123</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1530"><ip.session_id>767</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79683804512024</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367720934168131</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367720934168131</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1531"><ip.session_id>767</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.7968430519104</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367714464143261</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367714464143261</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>543</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>543</min_tcp_pkts><max_tcp_pkts>543</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1532"><ip.session_id>768</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79686713218689</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.024080276489257812</time_between_pkts_sum><time_between_pkts_avg>0.024080276489257812</time_between_pkts_avg><time_between_pkts_max>0.024080276489257812</time_between_pkts_max><time_between_pkts_min>0.024080276489257812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367683346507489</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367683346507489</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1533"><ip.session_id>768</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796873092651367</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.113676756441487</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.113676756441487</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>16113</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>16113</min_tcp_pkts><max_tcp_pkts>16113</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1534"><ip.session_id>769</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796900987625122</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.027894973754882812</time_between_pkts_sum><time_between_pkts_avg>0.027894973754882812</time_between_pkts_avg><time_between_pkts_max>0.027894973754882812</time_between_pkts_max><time_between_pkts_min>0.027894973754882812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367639597248298</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367639597248298</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1535"><ip.session_id>769</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796910047531128</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367627889757179</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367627889757179</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>648</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>648</min_tcp_pkts><max_tcp_pkts>648</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1536"><ip.session_id>770</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796900987625122</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367639597248298</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367639597248298</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1537"><ip.session_id>770</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796916961669922</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367618955109128</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367618955109128</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1039</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1039</min_tcp_pkts><max_tcp_pkts>1039</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1538"><ip.session_id>771</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796921014785767</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367613717563352</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367613717563352</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1539"><ip.session_id>771</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796925067901611</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367608480022402</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367608480022402</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8500</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8500</min_tcp_pkts><max_tcp_pkts>8500</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1540"><ip.session_id>772</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796956062316895</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.030994415283203125</time_between_pkts_max><time_between_pkts_min>0.030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367568428398236</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367568428398236</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1541"><ip.session_id>772</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.796962022781372</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11367560726195176</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11367560726195176</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4567</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4567</min_tcp_pkts><max_tcp_pkts>4567</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1542"><ip.session_id>773</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797637939453125</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.6759166717529297</time_between_pkts_sum><time_between_pkts_avg>0.6759166717529297</time_between_pkts_avg><time_between_pkts_max>0.6759166717529297</time_between_pkts_max><time_between_pkts_min>0.6759166717529297</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366687364064923</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366687364064923</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1543"><ip.session_id>773</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797645092010498</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366678122855182</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366678122855182</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4444</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4444</min_tcp_pkts><max_tcp_pkts>4444</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1544"><ip.session_id>774</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79765009880066</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366671654017306</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366671654017306</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1545"><ip.session_id>774</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79765510559082</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366665185186792</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366665185186792</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1130</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1130</min_tcp_pkts><max_tcp_pkts>1130</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1546"><ip.session_id>775</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797685146331787</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030040740966796875</time_between_pkts_sum><time_between_pkts_avg>0.030040740966796875</time_between_pkts_avg><time_between_pkts_max>0.030040740966796875</time_between_pkts_max><time_between_pkts_min>0.030040740966796875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366626372358325</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366626372358325</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1547"><ip.session_id>775</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797691106796265</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1136661867143181</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1136661867143181</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9220</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9220</min_tcp_pkts><max_tcp_pkts>9220</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1548"><ip.session_id>776</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797734022140503</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04291534423828125</time_between_pkts_sum><time_between_pkts_avg>0.04291534423828125</time_between_pkts_avg><time_between_pkts_max>0.04291534423828125</time_between_pkts_max><time_between_pkts_min>0.04291534423828125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366563225068929</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366563225068929</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1549"><ip.session_id>776</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79773998260498</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366555524227978</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366555524227978</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7512</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7512</min_tcp_pkts><max_tcp_pkts>7512</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1550"><ip.session_id>777</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797765970230103</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366521948683359</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366521948683359</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1551"><ip.session_id>777</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797789096832275</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.023126602172851562</time_between_pkts_sum><time_between_pkts_avg>0.023126602172851562</time_between_pkts_avg><time_between_pkts_max>0.023126602172851562</time_between_pkts_max><time_between_pkts_min>0.023126602172851562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366492069695773</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366492069695773</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2013</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2013</min_tcp_pkts><max_tcp_pkts>2013</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1552"><ip.session_id>778</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797796964645386</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1136648190471519</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1136648190471519</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1553"><ip.session_id>778</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797807931900024</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1136646773537865</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1136646773537865</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>49156</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>49156</min_tcp_pkts><max_tcp_pkts>49156</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1554"><ip.session_id>779</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797796964645386</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1136648190471519</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1136648190471519</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1555"><ip.session_id>779</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797815084457397</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366458494526027</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366458494526027</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1104</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1104</min_tcp_pkts><max_tcp_pkts>1104</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1556"><ip.session_id>780</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797796964645386</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1136648190471519</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1136648190471519</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1557"><ip.session_id>780</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797820091247559</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1136645202593813</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1136645202593813</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>340</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>340</min_tcp_pkts><max_tcp_pkts>340</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1558"><ip.session_id>781</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797822952270508</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366448329605496</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366448329605496</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1559"><ip.session_id>781</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797827959060669</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366441861029168</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366441861029168</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3689</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3689</min_tcp_pkts><max_tcp_pkts>3689</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1560"><ip.session_id>782</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797822952270508</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366448329605496</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366448329605496</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1561"><ip.session_id>782</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797833919525146</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366434160352665</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366434160352665</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6646</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6646</min_tcp_pkts><max_tcp_pkts>6646</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1562"><ip.session_id>783</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797840118408203</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1136642615166017</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1136642615166017</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1563"><ip.session_id>783</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797843933105469</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366421223239628</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366421223239628</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7627</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7627</min_tcp_pkts><max_tcp_pkts>7627</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1564"><ip.session_id>784</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797856092453003</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.012159347534179688</time_between_pkts_sum><time_between_pkts_avg>0.012159347534179688</time_between_pkts_avg><time_between_pkts_max>0.012159347534179688</time_between_pkts_max><time_between_pkts_min>0.012159347534179688</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366405513927674</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366405513927674</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1565"><ip.session_id>784</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797860145568848</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366400277500006</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366400277500006</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2065</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2065</min_tcp_pkts><max_tcp_pkts>2065</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1566"><ip.session_id>785</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797868967056274</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366388880585877</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366388880585877</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1567"><ip.session_id>785</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79787302017212</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366383644173536</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366383644173536</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2601</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2601</min_tcp_pkts><max_tcp_pkts>2601</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1568"><ip.session_id>786</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797879934310913</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366374711481263</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366374711481263</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1569"><ip.session_id>786</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797883987426758</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366369475081976</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366369475081976</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1192</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1192</min_tcp_pkts><max_tcp_pkts>1192</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1570"><ip.session_id>787</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.797888994216919</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366363006595401</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366363006595401</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1571"><ip.session_id>787</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.79789400100708</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11366356538116186</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11366356538116186</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1024</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1024</min_tcp_pkts><max_tcp_pkts>1024</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1572"><ip.session_id>788</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.811017036437988</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>13.123035430908203</time_between_pkts_sum><time_between_pkts_avg>13.123035430908203</time_between_pkts_avg><time_between_pkts_max>13.123035430908203</time_between_pkts_max><time_between_pkts_min>13.123035430908203</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11349427607102527</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11349427607102527</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1573"><ip.session_id>788</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.811023950576782</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11349418701041422</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11349418701041422</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9207</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9207</min_tcp_pkts><max_tcp_pkts>9207</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1574"><ip.session_id>789</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.81102991104126</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11349411023413757</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11349411023413757</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1575"><ip.session_id>789</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.811033964157104</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11349405802632877</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11349405802632877</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3268</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3268</min_tcp_pkts><max_tcp_pkts>3268</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1576"><ip.session_id>790</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.833643913269043</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>22.609949111938477</time_between_pkts_sum><time_between_pkts_avg>22.609949111938477</time_between_pkts_avg><time_between_pkts_max>22.609949111938477</time_between_pkts_max><time_between_pkts_min>22.609949111938477</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11320356693322187</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11320356693322187</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1577"><ip.session_id>790</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.833660125732422</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.01621246337890625</time_between_pkts_sum><time_between_pkts_avg>0.01621246337890625</time_between_pkts_avg><time_between_pkts_max>0.01621246337890625</time_between_pkts_max><time_between_pkts_min>0.01621246337890625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1132033591701138</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1132033591701138</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>16016</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>16016</min_tcp_pkts><max_tcp_pkts>16016</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1578"><ip.session_id>791</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83382797241211</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.1678466796875</time_between_pkts_sum><time_between_pkts_avg>0.1678466796875</time_between_pkts_avg><time_between_pkts_max>0.1678466796875</time_between_pkts_max><time_between_pkts_min>0.1678466796875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1132012082556942</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1132012082556942</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1579"><ip.session_id>791</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.833835124969482</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11320111659922504</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11320111659922504</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>722</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>722</min_tcp_pkts><max_tcp_pkts>722</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1580"><ip.session_id>792</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.833840131759644</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11320105243978493</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11320105243978493</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1581"><ip.session_id>792</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.833845138549805</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11320098828041755</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11320098828041755</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1641</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1641</min_tcp_pkts><max_tcp_pkts>1641</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1582"><ip.session_id>793</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.833858013153076</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.012874603271484375</time_between_pkts_sum><time_between_pkts_avg>0.012874603271484375</time_between_pkts_avg><time_between_pkts_max>0.012874603271484375</time_between_pkts_max><time_between_pkts_min>0.012874603271484375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11320082329952111</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11320082329952111</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1583"><ip.session_id>793</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.833863973617554</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11320074691963931</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11320074691963931</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>99</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>99</min_tcp_pkts><max_tcp_pkts>99</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1584"><ip.session_id>794</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.833858013153076</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11320082329952111</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11320082329952111</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1585"><ip.session_id>794</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.833869934082031</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11320067053986059</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11320067053986059</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5100</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5100</min_tcp_pkts><max_tcp_pkts>5100</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1586"><ip.session_id>795</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834141969680786</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.2720355987548828</time_between_pkts_sum><time_between_pkts_avg>0.2720355987548828</time_between_pkts_avg><time_between_pkts_max>0.2720355987548828</time_between_pkts_max><time_between_pkts_min>0.2720355987548828</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319718467645751</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319718467645751</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1587"><ip.session_id>795</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83415412902832</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011205673217773438</time_between_pkts_sum><time_between_pkts_avg>0.011205673217773438</time_between_pkts_avg><time_between_pkts_max>0.011205673217773438</time_between_pkts_max><time_between_pkts_min>0.011205673217773438</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319702887162456</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319702887162456</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>765</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>765</min_tcp_pkts><max_tcp_pkts>765</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1588"><ip.session_id>796</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834141969680786</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319718467645751</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319718467645751</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1589"><ip.session_id>796</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834160089492798</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319695249686308</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319695249686308</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>17</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>17</min_tcp_pkts><max_tcp_pkts>17</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1590"><ip.session_id>797</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834142923355103</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319717245645511</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319717245645511</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1591"><ip.session_id>797</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834165096282959</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1131968883421431</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1131968883421431</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4998</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4998</min_tcp_pkts><max_tcp_pkts>4998</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1592"><ip.session_id>798</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834168910980225</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319683946240526</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319683946240526</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1593"><ip.session_id>798</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834176063537598</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319674781301059</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319674781301059</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>88</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>88</min_tcp_pkts><max_tcp_pkts>88</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1594"><ip.session_id>799</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834168910980225</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319683946240526</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319683946240526</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1595"><ip.session_id>799</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834182024002075</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319667143862838</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319667143862838</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1037</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1037</min_tcp_pkts><max_tcp_pkts>1037</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1596"><ip.session_id>800</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834183931350708</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0019073486328125</time_between_pkts_sum><time_between_pkts_avg>0.0019073486328125</time_between_pkts_avg><time_between_pkts_max>0.0019073486328125</time_between_pkts_max><time_between_pkts_min>0.0019073486328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319664699884785</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319664699884785</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1597"><ip.session_id>800</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83418893814087</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319658284447415</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319658284447415</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10621</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10621</min_tcp_pkts><max_tcp_pkts>10621</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1598"><ip.session_id>801</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834195137023926</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319650341535031</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319650341535031</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1599"><ip.session_id>801</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834200143814087</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319643926113937</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319643926113937</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8031</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8031</min_tcp_pkts><max_tcp_pkts>8031</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1600"><ip.session_id>802</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834195137023926</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319650341535031</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319650341535031</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1601"><ip.session_id>802</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834206104278564</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319636288717354</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319636288717354</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>52848</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>52848</min_tcp_pkts><max_tcp_pkts>52848</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1602"><ip.session_id>803</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834219932556152</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.013828277587890625</time_between_pkts_sum><time_between_pkts_avg>0.013828277587890625</time_between_pkts_avg><time_between_pkts_max>0.013828277587890625</time_between_pkts_max><time_between_pkts_min>0.013828277587890625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1131961856999697</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1131961856999697</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1603"><ip.session_id>803</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834228038787842</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319608183186672</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319608183186672</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1580</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1580</min_tcp_pkts><max_tcp_pkts>1580</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1604"><ip.session_id>804</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834219932556152</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1131961856999697</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1131961856999697</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1605"><ip.session_id>804</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834233045578003</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319601767813364</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319601767813364</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5080</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5080</min_tcp_pkts><max_tcp_pkts>5080</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1606"><ip.session_id>805</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834219932556152</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1131961856999697</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1131961856999697</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1607"><ip.session_id>805</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834237098693848</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1131959657442125</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1131959657442125</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8800</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8800</min_tcp_pkts><max_tcp_pkts>8800</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1608"><ip.session_id>806</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834243059158325</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319588937088562</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319588937088562</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1609"><ip.session_id>806</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834249019622803</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319581299766182</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319581299766182</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2038</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2038</min_tcp_pkts><max_tcp_pkts>2038</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1610"><ip.session_id>807</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834243059158325</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319588937088562</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319588937088562</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1611"><ip.session_id>807</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834254026412964</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319574884423346</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319574884423346</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3690</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3690</min_tcp_pkts><max_tcp_pkts>3690</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1612"><ip.session_id>808</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83426809310913</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014066696166992188</time_between_pkts_sum><time_between_pkts_avg>0.014066696166992188</time_between_pkts_avg><time_between_pkts_max>0.014066696166992188</time_between_pkts_max><time_between_pkts_min>0.014066696166992188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319556860403816</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319556860403816</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1613"><ip.session_id>808</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834274053573608</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319549223124718</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319549223124718</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>64680</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>64680</min_tcp_pkts><max_tcp_pkts>64680</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1614"><ip.session_id>809</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83426809310913</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319556860403816</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319556860403816</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1615"><ip.session_id>809</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834280014038086</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319541585855927</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319541585855927</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>50006</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>50006</min_tcp_pkts><max_tcp_pkts>50006</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1616"><ip.session_id>810</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83428406715393</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319536392519036</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319536392519036</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1617"><ip.session_id>810</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834290981292725</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319527533308278</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319527533308278</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1063</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1063</min_tcp_pkts><max_tcp_pkts>1063</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1618"><ip.session_id>811</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83428406715393</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319536392519036</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319536392519036</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1619"><ip.session_id>811</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834298133850098</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319518368622086</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319518368622086</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1114</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1114</min_tcp_pkts><max_tcp_pkts>1114</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1620"><ip.session_id>812</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83428406715393</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319536392519036</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319536392519036</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1621"><ip.session_id>812</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834303140640259</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319511953350582</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319511953350582</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7200</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7200</min_tcp_pkts><max_tcp_pkts>7200</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1622"><ip.session_id>813</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83430814743042</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1131950553808635</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1131950553808635</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1623"><ip.session_id>813</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834315061569214</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319496678923888</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319496678923888</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1079</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1079</min_tcp_pkts><max_tcp_pkts>1079</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1624"><ip.session_id>814</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83430814743042</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1131950553808635</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1131950553808635</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1625"><ip.session_id>814</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834322929382324</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319486597824852</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319486597824852</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>55555</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>55555</min_tcp_pkts><max_tcp_pkts>55555</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1626"><ip.session_id>815</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834326982498169</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319481404538416</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319481404538416</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1627"><ip.session_id>815</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834334135055542</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1131947223992692</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1131947223992692</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5000</min_tcp_pkts><max_tcp_pkts>5000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1628"><ip.session_id>816</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834326982498169</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319481404538416</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319481404538416</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1629"><ip.session_id>816</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83436393737793</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.029802322387695312</time_between_pkts_sum><time_between_pkts_avg>0.029802322387695312</time_between_pkts_avg><time_between_pkts_max>0.029802322387695312</time_between_pkts_max><time_between_pkts_min>0.029802322387695312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319434054205418</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319434054205418</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>27715</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>27715</min_tcp_pkts><max_tcp_pkts>27715</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1630"><ip.session_id>817</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83437204360962</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319423667733738</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319423667733738</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1631"><ip.session_id>817</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834378957748413</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319414808699427</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319414808699427</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5631</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5631</min_tcp_pkts><max_tcp_pkts>5631</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1632"><ip.session_id>818</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83437204360962</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319423667733738</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319423667733738</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1633"><ip.session_id>818</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834387063980103</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319404422263066</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319404422263066</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32</min_tcp_pkts><max_tcp_pkts>32</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1634"><ip.session_id>819</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834391117095947</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319399229052034</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319399229052034</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1635"><ip.session_id>819</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834394931793213</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319394341328355</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319394341328355</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7496</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7496</min_tcp_pkts><max_tcp_pkts>7496</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1636"><ip.session_id>820</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834505081176758</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.11014938354492188</time_between_pkts_sum><time_between_pkts_avg>0.11014938354492188</time_between_pkts_avg><time_between_pkts_max>0.11014938354492188</time_between_pkts_max><time_between_pkts_min>0.11014938354492188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319253210127757</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319253210127757</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1637"><ip.session_id>820</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834512948989868</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319243129462381</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319243129462381</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>83</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>83</min_tcp_pkts><max_tcp_pkts>83</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1638"><ip.session_id>821</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83453893661499</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319209832846765</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319209832846765</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1639"><ip.session_id>821</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834548950195312</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319197003010462</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319197003010462</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1055</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1055</min_tcp_pkts><max_tcp_pkts>1055</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1640"><ip.session_id>822</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83453893661499</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319209832846765</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319209832846765</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1641"><ip.session_id>822</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83455491065979</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319189366216946</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319189366216946</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6689</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6689</min_tcp_pkts><max_tcp_pkts>6689</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1642"><ip.session_id>823</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834558010101318</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319185395088391</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319185395088391</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1643"><ip.session_id>823</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834564924240112</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319176536427039</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319176536427039</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>11967</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>11967</min_tcp_pkts><max_tcp_pkts>11967</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1644"><ip.session_id>824</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834558010101318</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319185395088391</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319185395088391</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1645"><ip.session_id>824</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834568977355957</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319171343425107</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319171343425107</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>548</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>548</min_tcp_pkts><max_tcp_pkts>548</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1646"><ip.session_id>825</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834583044052124</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014066696166992188</time_between_pkts_sum><time_between_pkts_avg>0.014066696166992188</time_between_pkts_avg><time_between_pkts_max>0.014066696166992188</time_between_pkts_max><time_between_pkts_min>0.014066696166992188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1131915332069066</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1131915332069066</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1647"><ip.session_id>825</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834590911865234</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319143240203201</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319143240203201</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>49155</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>49155</min_tcp_pkts><max_tcp_pkts>49155</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1648"><ip.session_id>826</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834583044052124</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1131915332069066</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1131915332069066</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1649"><ip.session_id>826</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834597110748291</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319135298013606</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319135298013606</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1971</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1971</min_tcp_pkts><max_tcp_pkts>1971</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1650"><ip.session_id>827</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834599018096924</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0019073486328125</time_between_pkts_sum><time_between_pkts_avg>0.0019073486328125</time_between_pkts_avg><time_between_pkts_max>0.0019073486328125</time_between_pkts_max><time_between_pkts_min>0.0019073486328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319132854265204</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319132854265204</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1651"><ip.session_id>827</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834604024887085</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319126439430668</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319126439430668</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>900</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>900</min_tcp_pkts><max_tcp_pkts>900</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1652"><ip.session_id>828</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834599018096924</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319132854265204</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319132854265204</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1653"><ip.session_id>828</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834609031677246</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319120024603403</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319120024603403</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1287</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1287</min_tcp_pkts><max_tcp_pkts>1287</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1654"><ip.session_id>829</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834614038467407</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1131911360978341</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1131911360978341</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1655"><ip.session_id>829</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834619045257568</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319107194970687</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319107194970687</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1106</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1106</min_tcp_pkts><max_tcp_pkts>1106</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1656"><ip.session_id>830</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834655046463013</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03600120544433594</time_between_pkts_sum><time_between_pkts_avg>0.03600120544433594</time_between_pkts_avg><time_between_pkts_max>0.03600120544433594</time_between_pkts_max><time_between_pkts_min>0.03600120544433594</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319061069626637</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319061069626637</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1657"><ip.session_id>830</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834661960601807</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319052211159884</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319052211159884</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1500</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1500</min_tcp_pkts><max_tcp_pkts>1500</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1658"><ip.session_id>831</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834667921066284</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319044574561743</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319044574561743</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1659"><ip.session_id>831</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83467698097229</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319032966952304</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319032966952304</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1461</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1461</min_tcp_pkts><max_tcp_pkts>1461</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1660"><ip.session_id>832</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834667921066284</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319044574561743</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319044574561743</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1661"><ip.session_id>832</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834686040878296</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319021359366671</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319021359366671</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10000</min_tcp_pkts><max_tcp_pkts>10000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1662"><ip.session_id>833</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834691047668457</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319014944658508</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319014944658508</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1663"><ip.session_id>833</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83472204208374</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.030994415283203125</time_between_pkts_max><time_between_pkts_min>0.030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318975234722177</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318975234722177</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6668</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6668</min_tcp_pkts><max_tcp_pkts>6668</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1664"><ip.session_id>834</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834691047668457</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11319014944658508</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11319014944658508</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1665"><ip.session_id>834</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834728956222534</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318966376389776</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318966376389776</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>901</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>901</min_tcp_pkts><max_tcp_pkts>901</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1666"><ip.session_id>835</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834734916687012</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318958739907453</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318958739907453</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1667"><ip.session_id>835</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834748029708862</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.011920928955078125</time_between_pkts_max><time_between_pkts_min>0.011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318941939682615</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318941939682615</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>30</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>30</min_tcp_pkts><max_tcp_pkts>30</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1668"><ip.session_id>836</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834734916687012</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318958739907453</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318958739907453</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1669"><ip.session_id>836</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834754943847656</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318933081402327</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318933081402327</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2492</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2492</min_tcp_pkts><max_tcp_pkts>2492</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1670"><ip.session_id>837</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834736108779907</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.0011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.0011920928955078125</time_between_pkts_max><time_between_pkts_min>0.0011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318957212612225</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318957212612225</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1671"><ip.session_id>837</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834759950637817</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318926666794223</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318926666794223</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3737</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3737</min_tcp_pkts><max_tcp_pkts>3737</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1672"><ip.session_id>838</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834736108779907</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318957212612225</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318957212612225</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1673"><ip.session_id>838</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834764003753662</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318921474021558</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318921474021558</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1092</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1092</min_tcp_pkts><max_tcp_pkts>1092</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1674"><ip.session_id>839</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834736108779907</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318957212612225</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318957212612225</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1675"><ip.session_id>839</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834769010543823</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318915059426608</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318915059426608</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1089</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1089</min_tcp_pkts><max_tcp_pkts>1089</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1676"><ip.session_id>840</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834809064865112</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0400543212890625</time_between_pkts_sum><time_between_pkts_avg>0.0400543212890625</time_between_pkts_avg><time_between_pkts_max>0.0400543212890625</time_between_pkts_max><time_between_pkts_min>0.0400543212890625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318863742928753</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318863742928753</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1677"><ip.session_id>840</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834816932678223</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318853662957065</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318853662957065</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5877</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5877</min_tcp_pkts><max_tcp_pkts>5877</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1678"><ip.session_id>841</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834809064865112</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318863742928753</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318863742928753</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1679"><ip.session_id>841</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834825038909912</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318843277550467</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318843277550467</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>41511</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>41511</min_tcp_pkts><max_tcp_pkts>41511</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1680"><ip.session_id>842</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834840059280396</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015020370483398438</time_between_pkts_sum><time_between_pkts_avg>0.015020370483398438</time_between_pkts_avg><time_between_pkts_max>0.015020370483398438</time_between_pkts_max><time_between_pkts_min>0.015020370483398438</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1131882403405332</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1131882403405332</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1681"><ip.session_id>842</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834845066070557</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318817619568812</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318817619568812</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3211</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3211</min_tcp_pkts><max_tcp_pkts>3211</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1682"><ip.session_id>843</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834855079650879</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318804790621606</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318804790621606</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1683"><ip.session_id>843</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834861993789673</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318795932555983</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318795932555983</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>873</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>873</min_tcp_pkts><max_tcp_pkts>873</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1684"><ip.session_id>844</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834855079650879</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318804790621606</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318804790621606</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1685"><ip.session_id>844</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834867000579834</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318789518103327</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318789518103327</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8002</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8002</min_tcp_pkts><max_tcp_pkts>8002</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1686"><ip.session_id>845</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834872961044312</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318781881859642</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318781881859642</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1687"><ip.session_id>845</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834882974624634</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318769052993448</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318769052993448</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>27000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>27000</min_tcp_pkts><max_tcp_pkts>27000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1688"><ip.session_id>846</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834872961044312</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318781881859642</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318781881859642</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1689"><ip.session_id>846</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834887981414795</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318762638571256</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318762638571256</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>687</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>687</min_tcp_pkts><max_tcp_pkts>687</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1690"><ip.session_id>847</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834873914718628</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318780660061609</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318780660061609</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1691"><ip.session_id>847</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834893941879272</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1131875500236384</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1131875500236384</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1455</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1455</min_tcp_pkts><max_tcp_pkts>1455</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1692"><ip.session_id>848</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834897994995117</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318749809748682</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318749809748682</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1693"><ip.session_id>848</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83490800857544</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1131873698095519</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1131873698095519</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9009</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9009</min_tcp_pkts><max_tcp_pkts>9009</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1694"><ip.session_id>849</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834897994995117</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318749809748682</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318749809748682</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1695"><ip.session_id>849</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834914922714233</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318728122995703</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318728122995703</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2002</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2002</min_tcp_pkts><max_tcp_pkts>2002</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1696"><ip.session_id>850</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834897994995117</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318749809748682</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318749809748682</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1697"><ip.session_id>850</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834919929504395</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318721708619901</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318721708619901</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8443</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8443</min_tcp_pkts><max_tcp_pkts>8443</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1698"><ip.session_id>851</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834897994995117</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318749809748682</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318749809748682</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1699"><ip.session_id>851</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834922075271606</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0021457672119140625</time_between_pkts_sum><time_between_pkts_avg>0.0021457672119140625</time_between_pkts_avg><time_between_pkts_max>0.0021457672119140625</time_between_pkts_max><time_between_pkts_min>0.0021457672119140625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318718959603927</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318718959603927</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2022</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2022</min_tcp_pkts><max_tcp_pkts>2022</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1700"><ip.session_id>852</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834897994995117</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318749809748682</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318749809748682</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1701"><ip.session_id>852</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834927082061768</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318712545238512</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318712545238512</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3827</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3827</min_tcp_pkts><max_tcp_pkts>3827</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1702"><ip.session_id>853</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834959983825684</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.032901763916015625</time_between_pkts_sum><time_between_pkts_avg>0.032901763916015625</time_between_pkts_avg><time_between_pkts_max>0.032901763916015625</time_between_pkts_max><time_between_pkts_min>0.032901763916015625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318670393875213</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318670393875213</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1703"><ip.session_id>853</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83496904373169</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.113186587870332</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.113186587870332</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9099</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9099</min_tcp_pkts><max_tcp_pkts>9099</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1704"><ip.session_id>854</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834959983825684</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318670393875213</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318670393875213</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1705"><ip.session_id>854</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834975957870483</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.113186499291961</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.113186499291961</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8081</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8081</min_tcp_pkts><max_tcp_pkts>8081</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1706"><ip.session_id>855</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834959983825684</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318670393875213</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318670393875213</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1707"><ip.session_id>855</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.834980010986328</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1131864473667735</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1131864473667735</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1132</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1132</min_tcp_pkts><max_tcp_pkts>1132</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1708"><ip.session_id>856</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83498501777649</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318638322396059</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318638322396059</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1709"><ip.session_id>856</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83499002456665</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318631908122039</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318631908122039</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1028</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1028</min_tcp_pkts><max_tcp_pkts>1028</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1710"><ip.session_id>857</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83501410484314</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.024080276489257812</time_between_pkts_sum><time_between_pkts_avg>0.024080276489257812</time_between_pkts_avg><time_between_pkts_max>0.024080276489257812</time_between_pkts_max><time_between_pkts_min>0.024080276489257812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318601058619979</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318601058619979</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1711"><ip.session_id>857</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835020065307617</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318593422630581</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318593422630581</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5405</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5405</min_tcp_pkts><max_tcp_pkts>5405</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1712"><ip.session_id>858</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835027933120728</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318583343140352</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318583343140352</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1713"><ip.session_id>858</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835034132003784</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318575401736453</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318575401736453</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5962</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5962</min_tcp_pkts><max_tcp_pkts>5962</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1714"><ip.session_id>859</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835027933120728</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318583343140352</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318583343140352</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1715"><ip.session_id>859</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835041999816895</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318565322278319</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318565322278319</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9943</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9943</min_tcp_pkts><max_tcp_pkts>9943</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1716"><ip.session_id>860</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835047006607056</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318558908087037</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318558908087037</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1717"><ip.session_id>860</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835052013397217</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318552493903024</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318552493903024</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1782</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1782</min_tcp_pkts><max_tcp_pkts>1782</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1718"><ip.session_id>861</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835047006607056</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318558908087037</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318558908087037</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1719"><ip.session_id>861</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835061073303223</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318540887302812</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318540887302812</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5960</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5960</min_tcp_pkts><max_tcp_pkts>5960</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1720"><ip.session_id>862</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835066080093384</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318534473139225</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318534473139225</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1721"><ip.session_id>862</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835070133209229</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318529280726405</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318529280726405</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5280</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5280</min_tcp_pkts><max_tcp_pkts>5280</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1722"><ip.session_id>863</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835097074508667</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.026941299438476562</time_between_pkts_sum><time_between_pkts_avg>0.026941299438476562</time_between_pkts_avg><time_between_pkts_max>0.026941299438476562</time_between_pkts_max><time_between_pkts_min>0.026941299438476562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318494766574044</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318494766574044</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1723"><ip.session_id>863</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835103034973145</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318487130728064</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318487130728064</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5904</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5904</min_tcp_pkts><max_tcp_pkts>5904</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1724"><ip.session_id>864</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835211038589478</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.10800361633300781</time_between_pkts_sum><time_between_pkts_avg>0.10800361633300781</time_between_pkts_avg><time_between_pkts_max>0.10800361633300781</time_between_pkts_max><time_between_pkts_min>0.10800361633300781</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318348770983606</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318348770983606</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1725"><ip.session_id>864</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835216999053955</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318341135334611</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318341135334611</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6002</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6002</min_tcp_pkts><max_tcp_pkts>6002</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1726"><ip.session_id>865</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83524203300476</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025033950805664062</time_between_pkts_sum><time_between_pkts_avg>0.025033950805664062</time_between_pkts_avg><time_between_pkts_max>0.025033950805664062</time_between_pkts_max><time_between_pkts_min>0.025033950805664062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318309065721337</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318309065721337</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1727"><ip.session_id>865</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835247993469238</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318301430125915</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318301430125915</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>84</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>84</min_tcp_pkts><max_tcp_pkts>84</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1728"><ip.session_id>866</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.8352530002594</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318295016233722</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318295016233722</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1729"><ip.session_id>866</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83525800704956</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318288602348799</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318288602348799</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4443</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4443</min_tcp_pkts><max_tcp_pkts>4443</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1730"><ip.session_id>867</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835283994674683</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.113182553113486</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.113182553113486</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1731"><ip.session_id>867</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835293054580688</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318243705357872</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318243705357872</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2009</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2009</min_tcp_pkts><max_tcp_pkts>2009</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1732"><ip.session_id>868</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835283994674683</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.113182553113486</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.113182553113486</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1733"><ip.session_id>868</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835302114486694</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318232099390946</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318232099390946</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3372</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3372</min_tcp_pkts><max_tcp_pkts>3372</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1734"><ip.session_id>869</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835319995880127</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.017881393432617188</time_between_pkts_sum><time_between_pkts_avg>0.017881393432617188</time_between_pkts_avg><time_between_pkts_max>0.017881393432617188</time_between_pkts_max><time_between_pkts_min>0.017881393432617188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318209192947123</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318209192947123</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1735"><ip.session_id>869</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.83533000946045</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318196365379084</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318196365379084</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>24444</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>24444</min_tcp_pkts><max_tcp_pkts>24444</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1736"><ip.session_id>870</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835319995880127</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318209192947123</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318209192947123</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1737"><ip.session_id>870</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835355997085571</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318163074921483</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318163074921483</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9081</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9081</min_tcp_pkts><max_tcp_pkts>9081</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1738"><ip.session_id>871</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835362911224365</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318154217860242</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318154217860242</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1739"><ip.session_id>871</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.835369110107422</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11318146277058501</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11318146277058501</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2557</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2557</min_tcp_pkts><max_tcp_pkts>2557</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1740"><ip.session_id>872</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.849584102630615</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>14.21499252319336</time_between_pkts_sum><time_between_pkts_avg>14.21499252319336</time_between_pkts_avg><time_between_pkts_max>14.21499252319336</time_between_pkts_max><time_between_pkts_min>14.21499252319336</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11299966059452911</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11299966059452911</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1741"><ip.session_id>872</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.849595069885254</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11299952055466943</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11299952055466943</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8649</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8649</min_tcp_pkts><max_tcp_pkts>8649</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1742"><ip.session_id>873</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.849601030349731</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11299944444619563</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11299944444619563</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1743"><ip.session_id>873</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.849606037139893</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11299938051515684</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11299938051515684</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5500</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5500</min_tcp_pkts><max_tcp_pkts>5500</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1744"><ip.session_id>874</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869621992111206</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>20.015954971313477</time_between_pkts_sum><time_between_pkts_avg>20.015954971313477</time_between_pkts_avg><time_between_pkts_max>20.015954971313477</time_between_pkts_max><time_between_pkts_min>20.015954971313477</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274437635441703</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274437635441703</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1745"><ip.session_id>874</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869648933410645</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.026941299438476562</time_between_pkts_sum><time_between_pkts_avg>0.026941299438476562</time_between_pkts_avg><time_between_pkts_max>0.026941299438476562</time_between_pkts_max><time_between_pkts_min>0.026941299438476562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274403389666858</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274403389666858</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4449</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4449</min_tcp_pkts><max_tcp_pkts>4449</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1746"><ip.session_id>875</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869693040847778</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04410743713378906</time_between_pkts_sum><time_between_pkts_avg>0.04410743713378906</time_between_pkts_avg><time_between_pkts_max>0.04410743713378906</time_between_pkts_max><time_between_pkts_min>0.04410743713378906</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.112743473240244</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.112743473240244</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1747"><ip.session_id>875</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869704961776733</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.011920928955078125</time_between_pkts_sum><time_between_pkts_avg>0.011920928955078125</time_between_pkts_avg><time_between_pkts_max>0.011920928955078125</time_between_pkts_max><time_between_pkts_min>0.011920928955078125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1127433217124378</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1127433217124378</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>51493</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>51493</min_tcp_pkts><max_tcp_pkts>51493</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1748"><ip.session_id>876</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869693040847778</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.112743473240244</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.112743473240244</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1749"><ip.session_id>876</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.86971402168274</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274320655157748</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274320655157748</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1152</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1152</min_tcp_pkts><max_tcp_pkts>1152</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1750"><ip.session_id>877</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869724035263062</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274307926879504</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274307926879504</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1751"><ip.session_id>877</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869738101959229</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014066696166992188</time_between_pkts_sum><time_between_pkts_avg>0.014066696166992188</time_between_pkts_avg><time_between_pkts_max>0.014066696166992188</time_between_pkts_max><time_between_pkts_min>0.014066696166992188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274290046727659</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274290046727659</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2021</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2021</min_tcp_pkts><max_tcp_pkts>2021</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1752"><ip.session_id>878</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869724035263062</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274307926879504</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274307926879504</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1753"><ip.session_id>878</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869746923446655</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274278833780012</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274278833780012</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1000</min_tcp_pkts><max_tcp_pkts>1000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1754"><ip.session_id>879</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869724035263062</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274307926879504</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274307926879504</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1755"><ip.session_id>879</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869750022888184</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274274894100998</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274274894100998</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8400</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8400</min_tcp_pkts><max_tcp_pkts>8400</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1756"><ip.session_id>880</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869724035263062</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274307926879504</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274307926879504</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1757"><ip.session_id>880</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869755029678345</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274268530009947</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274268530009947</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10002</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10002</min_tcp_pkts><max_tcp_pkts>10002</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1758"><ip.session_id>881</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869756937026978</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0019073486328125</time_between_pkts_sum><time_between_pkts_avg>0.0019073486328125</time_between_pkts_avg><time_between_pkts_max>0.0019073486328125</time_between_pkts_max><time_between_pkts_min>0.0019073486328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274266105596198</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274266105596198</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1759"><ip.session_id>881</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869761943817139</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274259741515068</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274259741515068</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>691</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>691</min_tcp_pkts><max_tcp_pkts>691</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1760"><ip.session_id>882</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869812965393066</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.051021575927734375</time_between_pkts_sum><time_between_pkts_avg>0.051021575927734375</time_between_pkts_avg><time_between_pkts_max>0.051021575927734375</time_between_pkts_max><time_between_pkts_min>0.051021575927734375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274194888907502</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274194888907502</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1761"><ip.session_id>882</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869822025299072</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009059906005859375</time_between_pkts_sum><time_between_pkts_avg>0.009059906005859375</time_between_pkts_avg><time_between_pkts_max>0.009059906005859375</time_between_pkts_max><time_between_pkts_min>0.009059906005859375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1127418337310192</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1127418337310192</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1556</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1556</min_tcp_pkts><max_tcp_pkts>1556</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1762"><ip.session_id>883</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869812965393066</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274194888907502</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274194888907502</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1763"><ip.session_id>883</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.86982798576355</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274175796926868</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274175796926868</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7999</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7999</min_tcp_pkts><max_tcp_pkts>7999</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1764"><ip.session_id>884</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869812965393066</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274194888907502</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274194888907502</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1765"><ip.session_id>884</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869872093200684</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04410743713378906</time_between_pkts_sum><time_between_pkts_avg>0.04410743713378906</time_between_pkts_avg><time_between_pkts_max>0.04410743713378906</time_between_pkts_max><time_between_pkts_min>0.04410743713378906</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1127411973354794</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1127411973354794</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32768</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32768</min_tcp_pkts><max_tcp_pkts>32768</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1766"><ip.session_id>885</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.86988091468811</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274108520939063</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274108520939063</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1767"><ip.session_id>885</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869890928268433</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274095793139799</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274095793139799</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3869</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3869</min_tcp_pkts><max_tcp_pkts>3869</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1768"><ip.session_id>886</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.86988091468811</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274108520939063</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274108520939063</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1769"><ip.session_id>886</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869898080825806</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274086701872205</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274086701872205</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4111</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4111</min_tcp_pkts><max_tcp_pkts>4111</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1770"><ip.session_id>887</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.86988091468811</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274108520939063</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274108520939063</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1771"><ip.session_id>887</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.869903087615967</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11274080337993612</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11274080337993612</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2869</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2869</min_tcp_pkts><max_tcp_pkts>2869</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1772"><ip.session_id>888</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.870934963226318</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>1.0318756103515625</time_between_pkts_sum><time_between_pkts_avg>1.0318756103515625</time_between_pkts_avg><time_between_pkts_max>1.0318756103515625</time_between_pkts_max><time_between_pkts_min>1.0318756103515625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272768926222683</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272768926222683</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1773"><ip.session_id>888</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.870949983596802</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015020370483398438</time_between_pkts_sum><time_between_pkts_avg>0.015020370483398438</time_between_pkts_avg><time_between_pkts_max>0.015020370483398438</time_between_pkts_max><time_between_pkts_min>0.015020370483398438</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272749839071255</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272749839071255</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>49154</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>49154</min_tcp_pkts><max_tcp_pkts>49154</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1774"><ip.session_id>889</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.870934963226318</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272768926222683</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272768926222683</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1775"><ip.session_id>889</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.870957136154175</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272740749974246</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272740749974246</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6129</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6129</min_tcp_pkts><max_tcp_pkts>6129</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1776"><ip.session_id>890</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.870962142944336</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1127273438761506</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1127273438761506</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1777"><ip.session_id>890</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.870966911315918</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00476837158203125</time_between_pkts_sum><time_between_pkts_avg>0.00476837158203125</time_between_pkts_avg><time_between_pkts_max>0.00476837158203125</time_between_pkts_max><time_between_pkts_min>0.00476837158203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272728328232036</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272728328232036</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>65000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>65000</min_tcp_pkts><max_tcp_pkts>65000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1778"><ip.session_id>891</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871011972427368</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04506111145019531</time_between_pkts_sum><time_between_pkts_avg>0.04506111145019531</time_between_pkts_avg><time_between_pkts_max>0.04506111145019531</time_between_pkts_max><time_between_pkts_min>0.04506111145019531</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272671067384106</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272671067384106</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1779"><ip.session_id>891</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871017932891846</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272663493241435</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272663493241435</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2046</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2046</min_tcp_pkts><max_tcp_pkts>2046</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1780"><ip.session_id>892</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.87108302116394</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.06508827209472656</time_between_pkts_sum><time_between_pkts_avg>0.06508827209472656</time_between_pkts_avg><time_between_pkts_max>0.06508827209472656</time_between_pkts_max><time_between_pkts_min>0.06508827209472656</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272580784265886</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272580784265886</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1781"><ip.session_id>892</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871089935302734</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272571998402066</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272571998402066</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2602</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2602</min_tcp_pkts><max_tcp_pkts>2602</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1782"><ip.session_id>893</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871094942092896</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272565636233367</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272565636233367</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1783"><ip.session_id>893</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871099948883057</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272559274071849</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272559274071849</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2725</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2725</min_tcp_pkts><max_tcp_pkts>2725</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1784"><ip.session_id>894</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871316909790039</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.21696090698242188</time_between_pkts_sum><time_between_pkts_avg>0.21696090698242188</time_between_pkts_avg><time_between_pkts_max>0.21696090698242188</time_between_pkts_max><time_between_pkts_min>0.21696090698242188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272283587304147</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272283587304147</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1785"><ip.session_id>894</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871326923370361</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1127227086362503</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1127227086362503</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>44176</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>44176</min_tcp_pkts><max_tcp_pkts>44176</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1786"><ip.session_id>895</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871316909790039</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272283587304147</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272283587304147</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1787"><ip.session_id>895</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871333122253418</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1127226298707616</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1127226298707616</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4004</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4004</min_tcp_pkts><max_tcp_pkts>4004</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1788"><ip.session_id>896</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871335983276367</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272259351749626</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272259351749626</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1789"><ip.session_id>896</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.87134313583374</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272250263443549</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272250263443549</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>49175</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>49175</min_tcp_pkts><max_tcp_pkts>49175</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1790"><ip.session_id>897</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871346950531006</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272245416352966</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272245416352966</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1791"><ip.session_id>897</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.87135100364685</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272240266323791</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272240266323791</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2043</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2043</min_tcp_pkts><max_tcp_pkts>2043</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1792"><ip.session_id>898</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871357917785645</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272231480990762</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272231480990762</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1793"><ip.session_id>898</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871362924575806</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272225119206429</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272225119206429</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2288</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2288</min_tcp_pkts><max_tcp_pkts>2288</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1794"><ip.session_id>899</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871381044387817</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.01811981201171875</time_between_pkts_sum><time_between_pkts_avg>0.01811981201171875</time_between_pkts_avg><time_between_pkts_max>0.01811981201171875</time_between_pkts_max><time_between_pkts_min>0.01811981201171875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272202095666002</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272202095666002</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1795"><ip.session_id>899</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871385097503662</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1127219694567641</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1127219694567641</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8254</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8254</min_tcp_pkts><max_tcp_pkts>8254</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1796"><ip.session_id>900</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871408939361572</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02384185791015625</time_between_pkts_sum><time_between_pkts_avg>0.02384185791015625</time_between_pkts_avg><time_between_pkts_max>0.02384185791015625</time_between_pkts_max><time_between_pkts_min>0.02384185791015625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272166651715242</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272166651715242</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1797"><ip.session_id>900</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871416091918945</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272157563558644</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272157563558644</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>366</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>366</min_tcp_pkts><max_tcp_pkts>366</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1798"><ip.session_id>901</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871443033218384</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.026941299438476562</time_between_pkts_sum><time_between_pkts_avg>0.026941299438476562</time_between_pkts_avg><time_between_pkts_max>0.026941299438476562</time_between_pkts_max><time_between_pkts_min>0.026941299438476562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1127212333163368</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1127212333163368</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1799"><ip.session_id>901</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871448993682861</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1127211575822704</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1127211575822704</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1083</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1083</min_tcp_pkts><max_tcp_pkts>1083</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1800"><ip.session_id>902</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871454954147339</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272108184830579</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272108184830579</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1801"><ip.session_id>902</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.8714599609375</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11272101823185414</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11272101823185414</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9968</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9968</min_tcp_pkts><max_tcp_pkts>9968</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1802"><ip.session_id>903</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871555089950562</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.09512901306152344</time_between_pkts_sum><time_between_pkts_avg>0.09512901306152344</time_between_pkts_avg><time_between_pkts_max>0.09512901306152344</time_between_pkts_max><time_between_pkts_min>0.09512901306152344</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271980953291615</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271980953291615</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1803"><ip.session_id>903</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871563911437988</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271969744936554</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271969744936554</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7007</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7007</min_tcp_pkts><max_tcp_pkts>7007</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1804"><ip.session_id>904</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871555089950562</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271980953291615</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271980953291615</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1805"><ip.session_id>904</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871572017669678</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271959445386692</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271959445386692</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2366</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2366</min_tcp_pkts><max_tcp_pkts>2366</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1806"><ip.session_id>905</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.87157392501831</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0019073486328125</time_between_pkts_sum><time_between_pkts_avg>0.0019073486328125</time_between_pkts_avg><time_between_pkts_max>0.0019073486328125</time_between_pkts_max><time_between_pkts_min>0.0019073486328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271957021965931</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271957021965931</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1807"><ip.session_id>905</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871578931808472</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1127195066049139</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1127195066049139</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5566</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5566</min_tcp_pkts><max_tcp_pkts>5566</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1808"><ip.session_id>906</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871599912643433</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271924002961876</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271924002961876</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1809"><ip.session_id>906</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871608018875122</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271913703495606</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271913703495606</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>888</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>888</min_tcp_pkts><max_tcp_pkts>888</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1810"><ip.session_id>907</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871599912643433</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271924002961876</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271924002961876</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1811"><ip.session_id>907</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871616125106812</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271903404048159</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271903404048159</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8192</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8192</min_tcp_pkts><max_tcp_pkts>8192</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1812"><ip.session_id>908</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871619939804077</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271898557255872</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271898557255872</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1813"><ip.session_id>908</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871624946594238</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1127189219584732</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1127189219584732</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1093</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1093</min_tcp_pkts><max_tcp_pkts>1093</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1814"><ip.session_id>909</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871644020080566</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.019073486328125</time_between_pkts_sum><time_between_pkts_avg>0.019073486328125</time_between_pkts_avg><time_between_pkts_max>0.019073486328125</time_between_pkts_max><time_between_pkts_min>0.019073486328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271867961975764</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271867961975764</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1815"><ip.session_id>909</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.87165093421936</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271859177223056</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271859177223056</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6005</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6005</min_tcp_pkts><max_tcp_pkts>6005</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1816"><ip.session_id>910</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871655941009521</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271852815858954</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271852815858954</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1817"><ip.session_id>910</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871659994125366</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271847666188513</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271847666188513</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>85</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>85</min_tcp_pkts><max_tcp_pkts>85</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1818"><ip.session_id>911</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871719121932983</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0591278076171875</time_between_pkts_sum><time_between_pkts_avg>0.0591278076171875</time_between_pkts_avg><time_between_pkts_max>0.0591278076171875</time_between_pkts_max><time_between_pkts_min>0.0591278076171875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271772542119418</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271772542119418</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1819"><ip.session_id>911</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871735095977783</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015974044799804688</time_between_pkts_sum><time_between_pkts_avg>0.015974044799804688</time_between_pkts_avg><time_between_pkts_max>0.015974044799804688</time_between_pkts_max><time_between_pkts_min>0.015974044799804688</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271752246675787</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271752246675787</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>6009</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>6009</min_tcp_pkts><max_tcp_pkts>6009</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1820"><ip.session_id>912</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.87174105644226</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1127174467376778</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1127174467376778</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1821"><ip.session_id>912</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871747016906738</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271737100869951</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271737100869951</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2034</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2034</min_tcp_pkts><max_tcp_pkts>2034</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1822"><ip.session_id>913</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871761083602905</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014066696166992188</time_between_pkts_sum><time_between_pkts_avg>0.014066696166992188</time_between_pkts_avg><time_between_pkts_max>0.014066696166992188</time_between_pkts_max><time_between_pkts_min>0.014066696166992188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271719228871419</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271719228871419</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1823"><ip.session_id>913</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871766090393066</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271712867665278</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271712867665278</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1521</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1521</min_tcp_pkts><max_tcp_pkts>1521</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1824"><ip.session_id>914</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871791124343872</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025033950805664062</time_between_pkts_sum><time_between_pkts_avg>0.025033950805664062</time_between_pkts_avg><time_between_pkts_max>0.025033950805664062</time_between_pkts_max><time_between_pkts_min>0.025033950805664062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271681061742272</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271681061742272</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1825"><ip.session_id>914</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.87179708480835</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271673488929917</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271673488929917</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5555</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5555</min_tcp_pkts><max_tcp_pkts>5555</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1826"><ip.session_id>915</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871803045272827</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271665916127738</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271665916127738</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1827"><ip.session_id>915</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871808052062988</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271659554981772</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271659554981772</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2701</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2701</min_tcp_pkts><max_tcp_pkts>2701</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1828"><ip.session_id>916</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871835947036743</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.027894973754882812</time_between_pkts_sum><time_between_pkts_avg>0.027894973754882812</time_between_pkts_avg><time_between_pkts_max>0.027894973754882812</time_between_pkts_max><time_between_pkts_min>0.027894973754882812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271624114442819</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271624114442819</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1829"><ip.session_id>916</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.8718421459198</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271616238797762</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271616238797762</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1503</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1503</min_tcp_pkts><max_tcp_pkts>1503</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1830"><ip.session_id>917</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871851921081543</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.009775161743164062</time_between_pkts_sum><time_between_pkts_avg>0.009775161743164062</time_between_pkts_avg><time_between_pkts_max>0.009775161743164062</time_between_pkts_max><time_between_pkts_min>0.009775161743164062</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271603819533688</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271603819533688</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1831"><ip.session_id>917</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871856927871704</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271597458457809</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271597458457809</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>125</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>125</min_tcp_pkts><max_tcp_pkts>125</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1832"><ip.session_id>918</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871880054473877</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.023126602172851562</time_between_pkts_sum><time_between_pkts_avg>0.023126602172851562</time_between_pkts_avg><time_between_pkts_max>0.023126602172851562</time_between_pkts_max><time_between_pkts_min>0.023126602172851562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271568076438589</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271568076438589</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1833"><ip.session_id>918</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871886014938354</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271560503778051</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271560503778051</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2160</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2160</min_tcp_pkts><max_tcp_pkts>2160</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1834"><ip.session_id>919</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.87194013595581</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.05412101745605469</time_between_pkts_sum><time_between_pkts_avg>0.05412101745605469</time_between_pkts_avg><time_between_pkts_max>0.05412101745605469</time_between_pkts_max><time_between_pkts_min>0.05412101745605469</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271491744486009</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271491744486009</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1835"><ip.session_id>919</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871946096420288</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271484171928035</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271484171928035</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9593</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9593</min_tcp_pkts><max_tcp_pkts>9593</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1836"><ip.session_id>920</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871952056884766</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271476599380237</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271476599380237</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1837"><ip.session_id>920</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.87195611000061</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271471450053547</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271471450053547</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1044</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1044</min_tcp_pkts><max_tcp_pkts>1044</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1838"><ip.session_id>921</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871962070465088</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271463877522842</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271463877522842</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1839"><ip.session_id>921</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.871967077255249</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271457516604913</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271457516604913</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>7676</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>7676</min_tcp_pkts><max_tcp_pkts>7676</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1840"><ip.session_id>922</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.872002124786377</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03504753112792969</time_between_pkts_sum><time_between_pkts_avg>0.03504753112792969</time_between_pkts_avg><time_between_pkts_max>0.03504753112792969</time_between_pkts_max><time_between_pkts_min>0.03504753112792969</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271412990380436</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271412990380436</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1841"><ip.session_id>922</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.872008085250854</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271405417928282</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271405417928282</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1863</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1863</min_tcp_pkts><max_tcp_pkts>1863</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1842"><ip.session_id>923</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.872014045715332</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271397845486301</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271397845486301</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1843"><ip.session_id>923</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.872019052505493</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271391484642902</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271391484642902</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>109</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>109</min_tcp_pkts><max_tcp_pkts>109</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1844"><ip.session_id>924</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.872035026550293</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015974044799804688</time_between_pkts_sum><time_between_pkts_avg>0.015974044799804688</time_between_pkts_avg><time_between_pkts_max>0.015974044799804688</time_between_pkts_max><time_between_pkts_min>0.015974044799804688</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271371190571475</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271371190571475</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1845"><ip.session_id>924</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.872041940689087</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1127136240659307</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1127136240659307</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3851</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3851</min_tcp_pkts><max_tcp_pkts>3851</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1846"><ip.session_id>925</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.872070074081421</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.028133392333984375</time_between_pkts_sum><time_between_pkts_avg>0.028133392333984375</time_between_pkts_avg><time_between_pkts_max>0.028133392333984375</time_between_pkts_max><time_between_pkts_min>0.028133392333984375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1127132666502903</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1127132666502903</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1847"><ip.session_id>925</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.872076988220215</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271317881120024</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271317881120024</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8292</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8292</min_tcp_pkts><max_tcp_pkts>8292</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1848"><ip.session_id>926</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.872081995010376</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271311520366878</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271311520366878</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1849"><ip.session_id>926</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.87208604812622</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11271306371191017</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11271306371191017</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1117</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1117</min_tcp_pkts><max_tcp_pkts>1117</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1850"><ip.session_id>927</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873465061187744</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>1.3790130615234375</time_between_pkts_sum><time_between_pkts_avg>1.3790130615234375</time_between_pkts_avg><time_between_pkts_max>1.3790130615234375</time_between_pkts_max><time_between_pkts_min>1.3790130615234375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269554712893032</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269554712893032</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1851"><ip.session_id>927</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873476028442383</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269540784182817</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269540784182817</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1309</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1309</min_tcp_pkts><max_tcp_pkts>1309</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1852"><ip.session_id>928</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873465061187744</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269554712893032</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269554712893032</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1853"><ip.session_id>928</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.87348198890686</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269533214246054</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269533214246054</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>726</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>726</min_tcp_pkts><max_tcp_pkts>726</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1854"><ip.session_id>929</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873502016067505</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02002716064453125</time_between_pkts_sum><time_between_pkts_avg>0.02002716064453125</time_between_pkts_avg><time_between_pkts_max>0.02002716064453125</time_between_pkts_max><time_between_pkts_min>0.02002716064453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269507779333023</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269507779333023</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1855"><ip.session_id>929</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873512029647827</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010013580322265625</time_between_pkts_sum><time_between_pkts_avg>0.010013580322265625</time_between_pkts_avg><time_between_pkts_max>0.010013580322265625</time_between_pkts_max><time_between_pkts_min>0.010013580322265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1126949506191956</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1126949506191956</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>27352</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>27352</min_tcp_pkts><max_tcp_pkts>27352</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1856"><ip.session_id>930</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873502016067505</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269507779333023</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269507779333023</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1857"><ip.session_id>930</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873517990112305</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269487492044222</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269487492044222</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8042</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8042</min_tcp_pkts><max_tcp_pkts>8042</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1858"><ip.session_id>931</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873520135879517</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0021457672119140625</time_between_pkts_sum><time_between_pkts_avg>0.0021457672119140625</time_between_pkts_avg><time_between_pkts_max>0.0021457672119140625</time_between_pkts_max><time_between_pkts_min>0.0021457672119140625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1126948476689159</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1126948476689159</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1859"><ip.session_id>931</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873525142669678</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1126947840820724</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1126947840820724</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8701</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8701</min_tcp_pkts><max_tcp_pkts>8701</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1860"><ip.session_id>932</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873543977737427</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.018835067749023438</time_between_pkts_sum><time_between_pkts_avg>0.018835067749023438</time_between_pkts_avg><time_between_pkts_max>0.018835067749023438</time_between_pkts_max><time_between_pkts_min>0.018835067749023438</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269454487506576</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269454487506576</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1861"><ip.session_id>932</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873552083969116</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269444192552738</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269444192552738</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>15002</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>15002</min_tcp_pkts><max_tcp_pkts>15002</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1862"><ip.session_id>933</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873543977737427</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269454487506576</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269454487506576</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1863"><ip.session_id>933</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873558044433594</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269436622745739</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269436622745739</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8651</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8651</min_tcp_pkts><max_tcp_pkts>8651</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1864"><ip.session_id>934</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873587131500244</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.029087066650390625</time_between_pkts_sum><time_between_pkts_avg>0.029087066650390625</time_between_pkts_avg><time_between_pkts_max>0.029087066650390625</time_between_pkts_max><time_between_pkts_min>0.029087066650390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269399682233486</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269399682233486</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1865"><ip.session_id>934</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873593091964722</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269392112486283</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269392112486283</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4900</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4900</min_tcp_pkts><max_tcp_pkts>4900</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1866"><ip.session_id>935</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873664140701294</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.07104873657226562</time_between_pkts_sum><time_between_pkts_avg>0.07104873657226562</time_between_pkts_avg><time_between_pkts_max>0.07104873657226562</time_between_pkts_max><time_between_pkts_min>0.07104873657226562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269301881882686</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269301881882686</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1867"><ip.session_id>935</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.87367296218872</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269290678854889</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269290678854889</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5810</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5810</min_tcp_pkts><max_tcp_pkts>5810</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1868"><ip.session_id>936</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873678922653198</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269283109254122</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269283109254122</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1869"><ip.session_id>936</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873685121536255</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269275236880112</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269275236880112</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3659</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3659</min_tcp_pkts><max_tcp_pkts>3659</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1870"><ip.session_id>937</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873691082000732</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1126926766730009</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1126926766730009</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1871"><ip.session_id>937</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873695135116577</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269262519991483</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269262519991483</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>20828</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>20828</min_tcp_pkts><max_tcp_pkts>20828</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1872"><ip.session_id>938</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873718023300171</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02288818359375</time_between_pkts_sum><time_between_pkts_avg>0.02288818359375</time_between_pkts_avg><time_between_pkts_max>0.02288818359375</time_between_pkts_max><time_between_pkts_min>0.02288818359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1126923345292525</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1126923345292525</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1873"><ip.session_id>938</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873723983764648</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1126922588340136</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1126922588340136</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5901</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5901</min_tcp_pkts><max_tcp_pkts>5901</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1874"><ip.session_id>939</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873762130737305</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03814697265625</time_between_pkts_sum><time_between_pkts_avg>0.03814697265625</time_between_pkts_avg><time_between_pkts_max>0.03814697265625</time_between_pkts_max><time_between_pkts_min>0.03814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269177438689264</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269177438689264</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1875"><ip.session_id>939</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873769044876099</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269168658129784</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269168658129784</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3322</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3322</min_tcp_pkts><max_tcp_pkts>3322</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1876"><ip.session_id>940</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873775005340576</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269161088692939</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269161088692939</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1877"><ip.session_id>940</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873779058456421</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269155941481693</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269155941481693</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>11110</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>11110</min_tcp_pkts><max_tcp_pkts>11110</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1878"><ip.session_id>941</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873811960220337</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.032901763916015625</time_between_pkts_sum><time_between_pkts_avg>0.032901763916015625</time_between_pkts_avg><time_between_pkts_max>0.032901763916015625</time_between_pkts_max><time_between_pkts_min>0.032901763916015625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269114158411465</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269114158411465</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1879"><ip.session_id>941</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873817920684814</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269106589047835</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269106589047835</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>30000</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>30000</min_tcp_pkts><max_tcp_pkts>30000</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1880"><ip.session_id>942</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873831987380981</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014066696166992188</time_between_pkts_sum><time_between_pkts_avg>0.014066696166992188</time_between_pkts_avg><time_between_pkts_max>0.014066696166992188</time_between_pkts_max><time_between_pkts_min>0.014066696166992188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11269088725389982</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11269088725389982</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1881"><ip.session_id>942</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873836994171143</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1126908236715255</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1126908236715255</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1061</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1061</min_tcp_pkts><max_tcp_pkts>1061</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1882"><ip.session_id>943</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873902082443237</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.06508827209472656</time_between_pkts_sum><time_between_pkts_avg>0.06508827209472656</time_between_pkts_avg><time_between_pkts_max>0.06508827209472656</time_between_pkts_max><time_between_pkts_min>0.06508827209472656</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268999710718823</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268999710718823</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1883"><ip.session_id>943</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873911142349243</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268988205523817</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268988205523817</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>389</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>389</min_tcp_pkts><max_tcp_pkts>389</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1884"><ip.session_id>944</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873903036117554</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00095367431640625</time_between_pkts_sum><time_between_pkts_avg>0.00095367431640625</time_between_pkts_avg><time_between_pkts_max>0.00095367431640625</time_between_pkts_max><time_between_pkts_min>0.00095367431640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268998499644559</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268998499644559</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1885"><ip.session_id>944</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.87391710281372</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268980636329388</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268980636329388</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5811</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5811</min_tcp_pkts><max_tcp_pkts>5811</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1886"><ip.session_id>945</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873939990997314</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02288818359375</time_between_pkts_sum><time_between_pkts_avg>0.02288818359375</time_between_pkts_avg><time_between_pkts_max>0.02288818359375</time_between_pkts_max><time_between_pkts_min>0.02288818359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268951570717271</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268951570717271</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1887"><ip.session_id>945</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873948097229004</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268941276682269</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268941276682269</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2135</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2135</min_tcp_pkts><max_tcp_pkts>2135</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1888"><ip.session_id>946</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.87395191192627</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.003814697265625</time_between_pkts_sum><time_between_pkts_avg>0.003814697265625</time_between_pkts_avg><time_between_pkts_max>0.003814697265625</time_between_pkts_max><time_between_pkts_min>0.003814697265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1126893643243701</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1126893643243701</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1889"><ip.session_id>946</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.87395691871643</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268930074371429</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268930074371429</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2161</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2161</min_tcp_pkts><max_tcp_pkts>2161</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1890"><ip.session_id>947</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873984098434448</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.027179718017578125</time_between_pkts_sum><time_between_pkts_avg>0.027179718017578125</time_between_pkts_avg><time_between_pkts_max>0.027179718017578125</time_between_pkts_max><time_between_pkts_min>0.027179718017578125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268895559283461</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268895559283461</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1891"><ip.session_id>947</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.873991966247559</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268885568113246</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268885568113246</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>40193</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>40193</min_tcp_pkts><max_tcp_pkts>40193</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1892"><ip.session_id>948</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.87399697303772</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268879210105061</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268879210105061</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1893"><ip.session_id>948</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.874001026153564</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268874063151309</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268874063151309</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9001</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9001</min_tcp_pkts><max_tcp_pkts>9001</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1894"><ip.session_id>949</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.874022006988525</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268847420171753</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268847420171753</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1895"><ip.session_id>949</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.874030113220215</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268837126327029</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268837126327029</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2500</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2500</min_tcp_pkts><max_tcp_pkts>2500</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1896"><ip.session_id>950</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.874022006988525</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268847420171753</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268847420171753</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1897"><ip.session_id>950</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.874036073684692</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268829557335552</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268829557335552</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2522</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2522</min_tcp_pkts><max_tcp_pkts>2522</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1898"><ip.session_id>951</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.874078035354614</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.041961669921875</time_between_pkts_sum><time_between_pkts_avg>0.041961669921875</time_between_pkts_avg><time_between_pkts_max>0.041961669921875</time_between_pkts_max><time_between_pkts_min>0.041961669921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268776271923321</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268776271923321</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1899"><ip.session_id>951</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.874084949493408</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268767491988982</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268767491988982</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3766</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3766</min_tcp_pkts><max_tcp_pkts>3766</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1900"><ip.session_id>952</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.874090909957886</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268759923091048</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268759923091048</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1901"><ip.session_id>952</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.874095916748047</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268753565224643</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268753565224643</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9003</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9003</min_tcp_pkts><max_tcp_pkts>9003</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1902"><ip.session_id>953</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.874104022979736</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268743271551387</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268743271551387</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1903"><ip.session_id>953</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.874108076095581</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268738124721811</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268738124721811</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3283</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3283</min_tcp_pkts><max_tcp_pkts>3283</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1904"><ip.session_id>954</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.874125957489014</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.017881393432617188</time_between_pkts_sum><time_between_pkts_avg>0.017881393432617188</time_between_pkts_avg><time_between_pkts_max>0.017881393432617188</time_between_pkts_max><time_between_pkts_min>0.017881393432617188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268715418176867</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268715418176867</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1905"><ip.session_id>954</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.874130010604858</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268710271372734</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268710271372734</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1310</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1310</min_tcp_pkts><max_tcp_pkts>1310</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1906"><ip.session_id>955</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.874153137207031</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.023126602172851562</time_between_pkts_sum><time_between_pkts_avg>0.023126602172851562</time_between_pkts_avg><time_between_pkts_max>0.023126602172851562</time_between_pkts_max><time_between_pkts_min>0.023126602172851562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268680904403806</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268680904403806</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1907"><ip.session_id>955</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.874158143997192</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268674546626564</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268674546626564</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>23502</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>23502</min_tcp_pkts><max_tcp_pkts>23502</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1908"><ip.session_id>956</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.87418794631958</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.029802322387695312</time_between_pkts_sum><time_between_pkts_avg>0.029802322387695312</time_between_pkts_avg><time_between_pkts_max>0.029802322387695312</time_between_pkts_max><time_between_pkts_min>0.029802322387695312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1126863670286286</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1126863670286286</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1909"><ip.session_id>956</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.874194145202637</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11268628831391941</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11268628831391941</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>19780</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>19780</min_tcp_pkts><max_tcp_pkts>19780</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1910"><ip.session_id>957</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.882576942443848</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>8.382797241210938</time_between_pkts_sum><time_between_pkts_avg>8.382797241210938</time_between_pkts_avg><time_between_pkts_max>8.382797241210938</time_between_pkts_max><time_between_pkts_min>8.382797241210938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11257994233876817</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11257994233876817</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1911"><ip.session_id>957</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.882596969604492</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02002716064453125</time_between_pkts_sum><time_between_pkts_avg>0.02002716064453125</time_between_pkts_avg><time_between_pkts_max>0.02002716064453125</time_between_pkts_max><time_between_pkts_min>0.02002716064453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11257968851023151</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11257968851023151</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2041</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2041</min_tcp_pkts><max_tcp_pkts>2041</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1912"><ip.session_id>958</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.882605075836182</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11257958577043492</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11257958577043492</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1913"><ip.session_id>958</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.882610082626343</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11257952231359541</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11257952231359541</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1141</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1141</min_tcp_pkts><max_tcp_pkts>1141</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1914"><ip.session_id>959</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908760070800781</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>26.149988174438477</time_between_pkts_sum><time_between_pkts_avg>26.149988174438477</time_between_pkts_avg><time_between_pkts_max>26.149988174438477</time_between_pkts_max><time_between_pkts_min>26.149988174438477</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224906631817205</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224906631817205</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1915"><ip.session_id>959</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908781051635742</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0209808349609375</time_between_pkts_sum><time_between_pkts_avg>0.0209808349609375</time_between_pkts_avg><time_between_pkts_max>0.0209808349609375</time_between_pkts_max><time_between_pkts_min>0.0209808349609375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224880196336062</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224880196336062</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32782</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32782</min_tcp_pkts><max_tcp_pkts>32782</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1916"><ip.session_id>960</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908760070800781</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224906631817205</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224906631817205</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1917"><ip.session_id>960</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908788919448853</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224870283062735</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224870283062735</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>20031</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>20031</min_tcp_pkts><max_tcp_pkts>20031</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1918"><ip.session_id>961</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908792972564697</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224865176231794</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224865176231794</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1919"><ip.session_id>961</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.90880012512207</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224856164188528</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224856164188528</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>5985</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>5985</min_tcp_pkts><max_tcp_pkts>5985</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1920"><ip.session_id>962</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908831119537354</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.030994415283203125</time_between_pkts_max><time_between_pkts_min>0.030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1122481711216826</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1122481711216826</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1921"><ip.session_id>962</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908846139907837</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015020370483398438</time_between_pkts_sum><time_between_pkts_avg>0.015020370483398438</time_between_pkts_avg><time_between_pkts_max>0.015020370483398438</time_between_pkts_max><time_between_pkts_min>0.015020370483398438</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224798187056187</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224798187056187</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3998</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3998</min_tcp_pkts><max_tcp_pkts>3998</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1922"><ip.session_id>963</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908831119537354</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1122481711216826</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1122481711216826</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1923"><ip.session_id>963</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908863067626953</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.016927719116210938</time_between_pkts_sum><time_between_pkts_avg>0.016927719116210938</time_between_pkts_avg><time_between_pkts_max>0.016927719116210938</time_between_pkts_max><time_between_pkts_min>0.016927719116210938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224776858831766</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224776858831766</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>50389</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>50389</min_tcp_pkts><max_tcp_pkts>50389</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1924"><ip.session_id>964</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908831119537354</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1122481711216826</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1122481711216826</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1925"><ip.session_id>964</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.90886902809143</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224769348912883</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224769348912883</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2399</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2399</min_tcp_pkts><max_tcp_pkts>2399</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1926"><ip.session_id>965</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908831119537354</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1122481711216826</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1122481711216826</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1927"><ip.session_id>965</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908872127532959</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224765443759036</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224765443759036</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8082</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8082</min_tcp_pkts><max_tcp_pkts>8082</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1928"><ip.session_id>966</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908880949020386</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008821487426757812</time_between_pkts_sum><time_between_pkts_avg>0.008821487426757812</time_between_pkts_avg><time_between_pkts_max>0.008821487426757812</time_between_pkts_max><time_between_pkts_min>0.008821487426757812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224754329105266</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224754329105266</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1929"><ip.session_id>966</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.90889310836792</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.012159347534179688</time_between_pkts_sum><time_between_pkts_avg>0.012159347534179688</time_between_pkts_avg><time_between_pkts_max>0.012159347534179688</time_between_pkts_max><time_between_pkts_min>0.012159347534179688</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224739008942905</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224739008942905</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1098</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1098</min_tcp_pkts><max_tcp_pkts>1098</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1930"><ip.session_id>967</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908880949020386</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224754329105266</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224754329105266</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1931"><ip.session_id>967</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908900022506714</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224730297496684</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224730297496684</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>22939</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>22939</min_tcp_pkts><max_tcp_pkts>22939</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1932"><ip.session_id>968</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908880949020386</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224754329105266</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224754329105266</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1933"><ip.session_id>968</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908904075622559</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224725190793117</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224725190793117</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3221</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3221</min_tcp_pkts><max_tcp_pkts>3221</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1934"><ip.session_id>969</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908880949020386</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224754329105266</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224754329105266</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1935"><ip.session_id>969</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.90890908241272</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224718882518656</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224718882518656</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>63331</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>63331</min_tcp_pkts><max_tcp_pkts>63331</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1936"><ip.session_id>970</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908880949020386</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224754329105266</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224754329105266</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1937"><ip.session_id>970</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908911943435669</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.00286102294921875</time_between_pkts_sum><time_between_pkts_avg>0.00286102294921875</time_between_pkts_avg><time_between_pkts_max>0.00286102294921875</time_between_pkts_max><time_between_pkts_min>0.00286102294921875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224715277793575</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224715277793575</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>35500</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>35500</min_tcp_pkts><max_tcp_pkts>35500</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1938"><ip.session_id>971</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908915042877197</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1122471137267735</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1122471137267735</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1939"><ip.session_id>971</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908920049667358</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224705064418421</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224705064418421</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2920</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2920</min_tcp_pkts><max_tcp_pkts>2920</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1940"><ip.session_id>972</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908915042877197</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1122471137267735</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1122471137267735</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1941"><ip.session_id>972</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908926010131836</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224697554595606</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224697554595606</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3367</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3367</min_tcp_pkts><max_tcp_pkts>3367</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1942"><ip.session_id>973</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908944129943848</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.01811981201171875</time_between_pkts_sum><time_between_pkts_avg>0.01811981201171875</time_between_pkts_avg><time_between_pkts_max>0.01811981201171875</time_between_pkts_max><time_between_pkts_min>0.01811981201171875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224674724795955</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224674724795955</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1943"><ip.session_id>973</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908951044082642</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224666013449515</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224666013449515</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1081</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1081</min_tcp_pkts><max_tcp_pkts>1081</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1944"><ip.session_id>974</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.908944129943848</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224674724795955</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224674724795955</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1945"><ip.session_id>974</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.90895700454712</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11224658503678954</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11224658503678954</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4848</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4848</min_tcp_pkts><max_tcp_pkts>4848</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1946"><ip.session_id>975</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.909919023513794</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.9620189666748047</time_between_pkts_sum><time_between_pkts_avg>0.9620189666748047</time_between_pkts_avg><time_between_pkts_max>0.9620189666748047</time_between_pkts_max><time_between_pkts_min>0.9620189666748047</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223446558391181</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223446558391181</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1947"><ip.session_id>975</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.909924983978271</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223439050252262</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223439050252262</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3889</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3889</min_tcp_pkts><max_tcp_pkts>3889</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1948"><ip.session_id>976</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.909985065460205</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.06008148193359375</time_between_pkts_sum><time_between_pkts_avg>0.06008148193359375</time_between_pkts_avg><time_between_pkts_max>0.06008148193359375</time_between_pkts_max><time_between_pkts_min>0.06008148193359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223363368772936</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223363368772936</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1949"><ip.session_id>976</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.909991025924683</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223355860745321</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223355860745321</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1185</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1185</min_tcp_pkts><max_tcp_pkts>1185</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1950"><ip.session_id>977</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910013914108276</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.02288818359375</time_between_pkts_sum><time_between_pkts_avg>0.02288818359375</time_between_pkts_avg><time_between_pkts_max>0.02288818359375</time_between_pkts_max><time_between_pkts_min>0.02288818359375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223327030012624</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223327030012624</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1951"><ip.session_id>977</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.91002106666565</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223318020439033</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223318020439033</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3828</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3828</min_tcp_pkts><max_tcp_pkts>3828</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1952"><ip.session_id>978</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910027027130127</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1122331051247209</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1122331051247209</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1953"><ip.session_id>978</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910031080245972</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223305407060306</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223305407060306</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9500</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9500</min_tcp_pkts><max_tcp_pkts>9500</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1954"><ip.session_id>979</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910045146942139</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.014066696166992188</time_between_pkts_sum><time_between_pkts_avg>0.014066696166992188</time_between_pkts_avg><time_between_pkts_max>0.014066696166992188</time_between_pkts_max><time_between_pkts_min>0.014066696166992188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223287688314268</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223287688314268</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1955"><ip.session_id>979</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910051107406616</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223280180387907</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223280180387907</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>44443</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>44443</min_tcp_pkts><max_tcp_pkts>44443</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1956"><ip.session_id>980</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910063982009888</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.012874603271484375</time_between_pkts_sum><time_between_pkts_avg>0.012874603271484375</time_between_pkts_avg><time_between_pkts_max>0.012874603271484375</time_between_pkts_max><time_between_pkts_min>0.012874603271484375</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223263963301248</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223263963301248</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1957"><ip.session_id>980</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.91007113456726</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007152557373046875</time_between_pkts_sum><time_between_pkts_avg>0.007152557373046875</time_between_pkts_avg><time_between_pkts_max>0.007152557373046875</time_between_pkts_max><time_between_pkts_min>0.007152557373046875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223254953828912</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223254953828912</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1761</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1761</min_tcp_pkts><max_tcp_pkts>1761</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1958"><ip.session_id>981</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910063982009888</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223263963301248</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223263963301248</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1959"><ip.session_id>981</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.9100821018219</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.010967254638671875</time_between_pkts_sum><time_between_pkts_avg>0.010967254638671875</time_between_pkts_avg><time_between_pkts_max>0.010967254638671875</time_between_pkts_max><time_between_pkts_min>0.010967254638671875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223241139332754</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223241139332754</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>10010</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>10010</min_tcp_pkts><max_tcp_pkts>10010</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1960"><ip.session_id>982</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.91008710861206</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1122323483272625</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1122323483272625</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1961"><ip.session_id>982</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910092115402222</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223228526126834</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223228526126834</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2033</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2033</min_tcp_pkts><max_tcp_pkts>2033</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1962"><ip.session_id>983</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910097122192383</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223222219534505</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223222219534505</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1963"><ip.session_id>983</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910104036331177</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223213510442465</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223213510442465</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3801</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3801</min_tcp_pkts><max_tcp_pkts>3801</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1964"><ip.session_id>984</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910145044326782</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.04100799560546875</time_between_pkts_sum><time_between_pkts_avg>0.04100799560546875</time_between_pkts_avg><time_between_pkts_max>0.04100799560546875</time_between_pkts_max><time_between_pkts_min>0.04100799560546875</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223161856795075</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223161856795075</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1965"><ip.session_id>984</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910150051116943</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223155550277672</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223155550277672</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1862</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1862</min_tcp_pkts><max_tcp_pkts>1862</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1966"><ip.session_id>985</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910174131393433</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.024080276489257812</time_between_pkts_sum><time_between_pkts_avg>0.024080276489257812</time_between_pkts_avg><time_between_pkts_max>0.024080276489257812</time_between_pkts_max><time_between_pkts_min>0.024080276489257812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223125219031083</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223125219031083</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1967"><ip.session_id>985</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.91018009185791</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1122311771132209</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1122311771132209</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>311</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>311</min_tcp_pkts><max_tcp_pkts>311</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1968"><ip.session_id>986</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910195112228394</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015020370483398438</time_between_pkts_sum><time_between_pkts_avg>0.015020370483398438</time_between_pkts_avg><time_between_pkts_max>0.015020370483398438</time_between_pkts_max><time_between_pkts_min>0.015020370483398438</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1122309879193998</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1122309879193998</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1969"><ip.session_id>986</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910201072692871</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223091284266346</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223091284266346</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2144</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2144</min_tcp_pkts><max_tcp_pkts>2144</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1970"><ip.session_id>987</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910207033157349</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223083776602755</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223083776602755</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1971"><ip.session_id>987</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910211086273193</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1122307867139725</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1122307867139725</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4125</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4125</min_tcp_pkts><max_tcp_pkts>4125</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1972"><ip.session_id>988</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910226106643677</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.015020370483398438</time_between_pkts_sum><time_between_pkts_avg>0.015020370483398438</time_between_pkts_avg><time_between_pkts_max>0.015020370483398438</time_between_pkts_max><time_between_pkts_min>0.015020370483398438</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223059752146763</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223059752146763</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1973"><ip.session_id>988</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910231113433838</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223053445744109</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223053445744109</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>14442</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>14442</min_tcp_pkts><max_tcp_pkts>14442</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1974"><ip.session_id>989</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910259008407593</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.027894973754882812</time_between_pkts_sum><time_between_pkts_avg>0.027894973754882812</time_between_pkts_avg><time_between_pkts_max>0.027894973754882812</time_between_pkts_max><time_between_pkts_min>0.027894973754882812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223018310201918</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223018310201918</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1975"><ip.session_id>989</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910265922546387</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223009601426337</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223009601426337</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1049</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1049</min_tcp_pkts><max_tcp_pkts>1049</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1976"><ip.session_id>990</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910269975662231</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11223004496288315</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11223004496288315</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1977"><ip.session_id>990</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910274982452393</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222998189947758</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222998189947758</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>8089</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>8089</min_tcp_pkts><max_tcp_pkts>8089</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1978"><ip.session_id>991</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910300970077515</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.025987625122070312</time_between_pkts_sum><time_between_pkts_avg>0.025987625122070312</time_between_pkts_avg><time_between_pkts_max>0.025987625122070312</time_between_pkts_max><time_between_pkts_min>0.025987625122070312</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222965457151113</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222965457151113</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1979"><ip.session_id>991</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910309076309204</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222955246960034</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222955246960034</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2196</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2196</min_tcp_pkts><max_tcp_pkts>2196</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1980"><ip.session_id>992</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910347938537598</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.03886222839355469</time_between_pkts_sum><time_between_pkts_avg>0.03886222839355469</time_between_pkts_avg><time_between_pkts_max>0.03886222839355469</time_between_pkts_max><time_between_pkts_min>0.03886222839355469</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222906298360825</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222906298360825</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1981"><ip.session_id>992</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910356044769287</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222896088277387</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222896088277387</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>4</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>4</min_tcp_pkts><max_tcp_pkts>4</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1982"><ip.session_id>993</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910347938537598</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222906298360825</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222906298360825</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1983"><ip.session_id>993</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910362005233765</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222888580874946</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222888580874946</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1105</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1105</min_tcp_pkts><max_tcp_pkts>1105</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1984"><ip.session_id>994</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910385131835938</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.023126602172851562</time_between_pkts_sum><time_between_pkts_avg>0.023126602172851562</time_between_pkts_avg><time_between_pkts_max>0.023126602172851562</time_between_pkts_max><time_between_pkts_min>0.023126602172851562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222859452248563</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222859452248563</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1985"><ip.session_id>994</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910392045974731</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222850743719519</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222850743719519</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>306</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>306</min_tcp_pkts><max_tcp_pkts>306</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1986"><ip.session_id>995</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.91044807434082</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.05602836608886719</time_between_pkts_sum><time_between_pkts_avg>0.05602836608886719</time_between_pkts_avg><time_between_pkts_max>0.05602836608886719</time_between_pkts_max><time_between_pkts_min>0.05602836608886719</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222780175103353</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222780175103353</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1987"><ip.session_id>995</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910465002059937</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.016927719116210938</time_between_pkts_sum><time_between_pkts_avg>0.016927719116210938</time_between_pkts_avg><time_between_pkts_max>0.016927719116210938</time_between_pkts_max><time_between_pkts_min>0.016927719116210938</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222758854547078</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222758854547078</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3800</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3800</min_tcp_pkts><max_tcp_pkts>3800</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1988"><ip.session_id>996</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.91044807434082</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222780175103353</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222780175103353</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1989"><ip.session_id>996</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.91047191619873</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222750146174154</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222750146174154</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3390</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3390</min_tcp_pkts><max_tcp_pkts>3390</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1990"><ip.session_id>997</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.91044807434082</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222780175103353</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222780175103353</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1991"><ip.session_id>997</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910476922988892</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1122274384011944</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1122274384011944</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>545</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>545</min_tcp_pkts><max_tcp_pkts>545</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1992"><ip.session_id>998</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.91048002243042</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0030994415283203125</time_between_pkts_sum><time_between_pkts_avg>0.0030994415283203125</time_between_pkts_avg><time_between_pkts_max>0.0030994415283203125</time_between_pkts_max><time_between_pkts_min>0.0030994415283203125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222739936374834</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222739936374834</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1993"><ip.session_id>998</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910484075546265</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1122273483148214</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1122273483148214</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1216</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1216</min_tcp_pkts><max_tcp_pkts>1216</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1994"><ip.session_id>999</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910556077957153</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.07200241088867188</time_between_pkts_sum><time_between_pkts_avg>0.07200241088867188</time_between_pkts_avg><time_between_pkts_max>0.07200241088867188</time_between_pkts_max><time_between_pkts_min>0.07200241088867188</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222644145338923</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222644145338923</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1995"><ip.session_id>999</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910563945770264</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.007867813110351562</time_between_pkts_sum><time_between_pkts_avg>0.007867813110351562</time_between_pkts_avg><time_between_pkts_max>0.007867813110351562</time_between_pkts_max><time_between_pkts_min>0.007867813110351562</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222634236014746</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222634236014746</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>32772</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>32772</min_tcp_pkts><max_tcp_pkts>32772</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1996"><ip.session_id>1000</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910568952560425</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.1122262793009029</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.1122262793009029</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1997"><ip.session_id>1000</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910574913024902</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0059604644775390625</time_between_pkts_sum><time_between_pkts_avg>0.0059604644775390625</time_between_pkts_avg><time_between_pkts_max>0.0059604644775390625</time_between_pkts_max><time_between_pkts_min>0.0059604644775390625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222620423046606</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222620423046606</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>3920</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>3920</min_tcp_pkts><max_tcp_pkts>3920</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1998"><ip.session_id>1001</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910581111907959</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.006198883056640625</time_between_pkts_sum><time_between_pkts_avg>0.006198883056640625</time_between_pkts_avg><time_between_pkts_max>0.006198883056640625</time_between_pkts_max><time_between_pkts_min>0.006198883056640625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222612615731828</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222612615731828</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="1999"><ip.session_id>1001</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910588026046753</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222603907585853</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222603907585853</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>1108</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>1108</min_tcp_pkts><max_tcp_pkts>1108</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="2000"><ip.session_id>1002</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910581111907959</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222612615731828</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222612615731828</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="2001"><ip.session_id>1002</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910594940185547</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222595199453392</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222595199453392</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>2910</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>2910</min_tcp_pkts><max_tcp_pkts>2910</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="2002"><ip.session_id>1003</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910619020462036</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.024080276489257812</time_between_pkts_sum><time_between_pkts_avg>0.024080276489257812</time_between_pkts_avg><time_between_pkts_max>0.024080276489257812</time_between_pkts_max><time_between_pkts_min>0.024080276489257812</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222564871235485</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222564871235485</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="2003"><ip.session_id>1003</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910627126693726</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.008106231689453125</time_between_pkts_sum><time_between_pkts_avg>0.008106231689453125</time_between_pkts_avg><time_between_pkts_max>0.008106231689453125</time_between_pkts_max><time_between_pkts_min>0.008106231689453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222554661773267</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222554661773267</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>903</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>903</min_tcp_pkts><max_tcp_pkts>903</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="2004"><ip.session_id>1004</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910619020462036</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0</time_between_pkts_sum><time_between_pkts_avg>0.0</time_between_pkts_avg><time_between_pkts_max>0.0</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222564871235485</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222564871235485</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="2005"><ip.session_id>1004</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.91063404083252</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222545953717229</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222545953717229</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>9618</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>9618</min_tcp_pkts><max_tcp_pkts>9618</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="2006"><ip.session_id>1005</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.91063904762268</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222539647891984</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222539647891984</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="2007"><ip.session_id>1005</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910644054412842</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0050067901611328125</time_between_pkts_sum><time_between_pkts_avg>0.0050067901611328125</time_between_pkts_avg><time_between_pkts_max>0.0050067901611328125</time_between_pkts_max><time_between_pkts_min>0.0050067901611328125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222533342073825</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222533342073825</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>50300</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>50300</min_tcp_pkts><max_tcp_pkts>50300</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="2008"><ip.session_id>1006</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.910650968551636</duration><ip.header_len>20</ip.header_len><ip.payload_len>24</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0069141387939453125</time_between_pkts_sum><time_between_pkts_avg>0.0069141387939453125</time_between_pkts_avg><time_between_pkts_max>0.0069141387939453125</time_between_pkts_max><time_between_pkts_min>0.0069141387939453125</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222524634050873</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222524634050873</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>1</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>0</tcp.ack><tcp.urg>0</tcp.urg><sport_g>1</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>1</dport_le><mean_tcp_pkts>59086</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>59086</min_tcp_pkts><max_tcp_pkts>59086</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
<row _id="2009"><ip.session_id>1006</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>1</ip.pkts_per_flow><duration>8.91065502166748</duration><ip.header_len>20</ip.header_len><ip.payload_len>20</ip.payload_len><ip.avg_bytes_tot_len>42.0</ip.avg_bytes_tot_len><time_between_pkts_sum>0.0040531158447265625</time_between_pkts_sum><time_between_pkts_avg>0.0040531158447265625</time_between_pkts_avg><time_between_pkts_max>0.0040531158447265625</time_between_pkts_max><time_between_pkts_min>0.0040531158447265625</time_between_pkts_min><time_between_pkts_std>0.0</time_between_pkts_std><(-0.001, 50.0]>1</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>1</tcp_pkts_per_flow><pkts_rate>0.11222519529354046</pkts_rate><tcp_bytes_per_flow>0</tcp_bytes_per_flow><byte_rate>0.11222519529354046</byte_rate><tcp.tcp_session_payload_up_len>1</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>1</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>1</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>1</tcp.rst><tcp.psh>0</tcp.psh><tcp.ack>1</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>1</sport_le><dport_g>1</dport_g><dport_le>0</dport_le><mean_tcp_pkts>222</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>222</min_tcp_pkts><max_tcp_pkts>222</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>0</mean_tcp_len><std_tcp_len>0</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>0</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>0</malware></row>
</data>
