source_port and destination_port are optional for malware sample HTTP traffic