Add monitoring http server flow. Remove the botnet out bound flow