My preliminary investigation of CTU-13 botnet dataset showed it contains four different kinds of traffic,namely:Botnet, benign (Non-Bontet), C&C server and background traffic.Please advise me on how to go about the dataset to make it useful in a two-class ML algorithm to make identify botnet and non-botnet traffic. Thank you