<data xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<row _id="1"><ip.session_id>1</ip.session_id><meta.direction>0</meta.direction><ip.pkts_per_flow>311</ip.pkts_per_flow><duration>310.0003650188446</duration><ip.header_len>6220</ip.header_len><ip.payload_len>13062</ip.payload_len><ip.avg_bytes_tot_len>59.333333333333336</ip.avg_bytes_tot_len><time_between_pkts_sum>21.640539169311523</time_between_pkts_sum><time_between_pkts_avg>0.06958372723251294</time_between_pkts_avg><time_between_pkts_max>0.1399517059326172</time_between_pkts_max><time_between_pkts_min>0.041961669921875</time_between_pkts_min><time_between_pkts_std>0.014886196305236573</time_between_pkts_std><(-0.001, 50.0]>311</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>311</tcp_pkts_per_flow><pkts_rate>1.003224625174537</pkts_rate><tcp_bytes_per_flow>3110</tcp_bytes_per_flow><byte_rate>1.003224625174537</byte_rate><tcp.tcp_session_payload_up_len>311</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>311</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>311</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>311</tcp.psh><tcp.ack>311</tcp.ack><tcp.urg>0</tcp.urg><sport_g>0</sport_g><sport_le>311</sport_le><dport_g>311</dport_g><dport_le>0</dport_le><mean_tcp_pkts>502</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>502</min_tcp_pkts><max_tcp_pkts>502</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>10</mean_tcp_len><std_tcp_len>0.0</std_tcp_len><min_tcp_len>10</min_tcp_len><max_tcp_len>10</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>1</malware></row>
<row _id="2"><ip.session_id>1</ip.session_id><meta.direction>1</meta.direction><ip.pkts_per_flow>622</ip.pkts_per_flow><duration>310.0003809928894</duration><ip.header_len>12440</ip.header_len><ip.payload_len>23636</ip.payload_len><ip.avg_bytes_tot_len>59.333333333333336</ip.avg_bytes_tot_len><time_between_pkts_sum>309978.7404537201</time_between_pkts_sum><time_between_pkts_avg>498.3581036233442</time_between_pkts_avg><time_between_pkts_max>1000.2760887145996</time_between_pkts_max><time_between_pkts_min>0.0</time_between_pkts_min><time_between_pkts_std>500.34707376292874</time_between_pkts_std><(-0.001, 50.0]>312</(-0.001, 50.0]><(50.0, 100.0]>0</(50.0, 100.0]><(100.0, 150.0]>0</(100.0, 150.0]><(150.0, 200.0]>0</(150.0, 200.0]><(200.0, 250.0]>0</(200.0, 250.0]><(250.0, 300.0]>0</(250.0, 300.0]><(300.0, 350.0]>0</(300.0, 350.0]><(350.0, 400.0]>0</(350.0, 400.0]><(400.0, 450.0]>0</(400.0, 450.0]><(450.0, 500.0]>0</(450.0, 500.0]><(500.0, 550.0]>0</(500.0, 550.0]><tcp_pkts_per_flow>622</tcp_pkts_per_flow><pkts_rate>2.0064491469585226</pkts_rate><tcp_bytes_per_flow>3732</tcp_bytes_per_flow><byte_rate>2.0064491469585226</byte_rate><tcp.tcp_session_payload_up_len>622</tcp.tcp_session_payload_up_len><tcp.tcp_session_payload_down_len>622</tcp.tcp_session_payload_down_len><(-0.001, 150.0]>622</(-0.001, 150.0]><(150.0, 300.0]>0</(150.0, 300.0]><(300.0, 450.0]>0</(300.0, 450.0]><(450.0, 600.0]>0</(450.0, 600.0]><(600.0, 750.0]>0</(600.0, 750.0]><(750.0, 900.0]>0</(750.0, 900.0]><(900.0, 1050.0]>0</(900.0, 1050.0]><(1050.0, 1200.0]>0</(1050.0, 1200.0]><(1200.0, 1350.0]>0</(1200.0, 1350.0]><(1350.0, 1500.0]>0</(1350.0, 1500.0]><(1500.0, 10000.0]>0</(1500.0, 10000.0]><tcp.fin>0</tcp.fin><tcp.syn>0</tcp.syn><tcp.rst>0</tcp.rst><tcp.psh>311</tcp.psh><tcp.ack>622</tcp.ack><tcp.urg>0</tcp.urg><sport_g>622</sport_g><sport_le>0</sport_le><dport_g>0</dport_g><dport_le>622</dport_le><mean_tcp_pkts>37648</mean_tcp_pkts><std_tcp_pkts>0</std_tcp_pkts><min_tcp_pkts>37648</min_tcp_pkts><max_tcp_pkts>37648</max_tcp_pkts><entropy_tcp_pkts>0</entropy_tcp_pkts><mean_tcp_len>6</mean_tcp_len><std_tcp_len>6.004828974624735</std_tcp_len><min_tcp_len>0</min_tcp_len><max_tcp_len>12</max_tcp_len><entropy_tcp_len>0</entropy_tcp_len><ssl.tls_version>0</ssl.tls_version><malware>1</malware></row>
</data>
