org.cert.netsa.mothra.analysis.misc_silk
note: original computes both flowtype "in" and "out"; here we assume the function will be invoked twice, once for each type.