flow generation improvements

[michi-covalent]

a couple of minor requests:

• VERDICT should match event_type, for example flows with event_type=1 should have verdict=DROPPED.
• it's probably better to also have consistent ip address to dns name mapping, like a given ip address always has the same dns names.