<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.749272,1.82759,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_0{
style=filled;
color=gray75;
1953[label="200.1.71.255;20pkt 20fpkt", shape=invhouse, color=bisque];
stat0[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.1.71.255:*, 167.223.6.0:25}[30%]&lt;BR/&gt;{200.1.71.255:*, 167.223.6.8:25}[20%]&lt;BR/&gt;{200.1.71.255:*, 167.223.21.90:25}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 9095: (2.5%)&lt;BR/&gt; 9078: (2.5%)&lt;BR/&gt; 9050: (2.5%)&lt;BR/&gt; 8980: (2.5%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="167.223.6.0" dst_port="25" src_ip="200.1.71.255"/>
      <filter dst_ip="167.223.21.90" dst_port="25" src_ip="200.1.71.255"/>
      <filter dst_ip="167.223.6.8" dst_port="25" src_ip="200.1.71.255"/>
    </slice>
    <from sec="989038805" usec="0"/>
    <to sec="989039681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16168,1.81097,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.195.6.17" dst_port="80" proto="tcp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="80" proto="udp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="80" proto="tcp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="80" proto="udp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="80" proto="tcp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="80" proto="udp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="80" proto="tcp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="80" proto="udp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="53" proto="tcp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="53" proto="udp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="53" proto="tcp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="53" proto="udp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="53" proto="tcp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="53" proto="udp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="53" proto="tcp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="53" proto="udp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="111" proto="tcp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="111" proto="udp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="111" proto="tcp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="111" proto="udp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="111" proto="tcp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="111" proto="udp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="111" proto="tcp" src_ip="130.131.217.51" src_port="53"/>
      <filter dst_ip="216.195.6.17" dst_port="111" proto="udp" src_ip="130.131.217.51" src_port="53"/>
      <from sec="989039531" usec="0"/>
      <to sec="989039598" usec="0"/>
    </slice>
    <from sec="989039531" usec="0"/>
    <to sec="989039599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_4{
style=filled;
color=gray75;
61[label="193.14.98.195;d;1pkt 1fpkt", shape=diamond, color=yellow];
63[label="130.202.151.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat4[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.202.151.98:34921, 193.14.98.195:20}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34921: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
61--63[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.14.98.195" dst_port="20" src_ip="130.202.151.98" src_port="34921"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_6{
style=filled;
color=gray75;
102[label="157.96.10.3;s;159pkt 159fpkt", shape=diamond, color=yellow];
stat6[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.96.10.3:*, 200.132.130.230:80}[27.673%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.0503%)&lt;BR/&gt; 6346: (3.77358%)&lt;BR/&gt; 8080: (3.14465%)&lt;BR/&gt; 23: (2.20126%)&lt;BR/&gt; 6667: (1.88679%)&gt;];
}
102--872[label="0.00628931;1pkt 1fpkt"];
102--884[label="0.00628931;1pkt 1fpkt"];
102--889[label="0.00628931;1pkt 1fpkt"];
102--901[label="0.00628931;1pkt 1fpkt"];
102--905[label="0.00628931;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.132.130.230" dst_port="80" src_ip="157.96.10.3"/>
    </slice>
    <from sec="989039294" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.79134,1.69321,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_7{
style=filled;
color=gray75;
112[label="160.90.43.201;d;21pkt 21fpkt", shape=diamond, color=yellow];
113[label="100.6.187.47;s;1pkt 1fpkt", shape=diamond, color=yellow];
807[label="100.6.187.47;s;1pkt 1fpkt", shape=hexagon, color=black];
1043[label="100.6.187.47;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat7[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.58.33.247:80, 160.90.43.201:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 1755: (8.33333%)&lt;BR/&gt; 1373: (8.33333%)&lt;BR/&gt; 37611: (2.08333%)&lt;BR/&gt; 1406: (2.08333%)&gt;];
}
112--113[label="1;1pkt 1fpkt"];
112--807[label="1;1pkt 1fpkt"];
112--1043[label="1;1pkt 1fpkt"];
113--807[label="1;1pkt 1fpkt"];
113--1043[label="1;1pkt 1fpkt"];
807--1043[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.90.43.201" src_ip="216.58.33.247" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12939,1.70319,901,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_8{
style=filled;
color=gray75;
17[label="155.59.168.27d;2pkt 2fpkt", shape=rectangle, color=red];
117[label="155.59.168.27;d;8pkt 8fpkt", shape=diamond, color=yellow];
118[label="70.91.214.42;s;6pkt 6fpkt", shape=diamond, color=yellow];
1390[label="25.192.57.213;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat8[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.91.214.42:6688, 155.59.168.27:*}[66.6667%]&lt;BR/&gt;{25.192.57.213:8888, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6688: (38.8889%)&lt;BR/&gt; 8888: (8.33333%)&lt;BR/&gt; 1073: (8.33333%)&lt;BR/&gt; 1072: (8.33333%)&lt;BR/&gt; 1071: (5.55556%)&gt;];
}
17--117[label="1;2pkt 2fpkt"];
17--118[label="1;2pkt 2fpkt"];
117--118[label="1;6pkt 6fpkt"];
117--1390[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="25.192.57.213" src_port="8888"/>
      <filter dst_ip="155.59.168.27" src_ip="70.91.214.42" src_port="6688"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_9{
style=filled;
color=gray75;
652[label="25.128.3.152;s;5pkt 5fpkt", shape=diamond, color=yellow];
1242[label="25.128.3.152;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat9[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.128.3.152:80, 155.59.32.139:*}[44.4444%]&lt;BR/&gt;{25.128.3.152:80, 160.90.195.20:*}[33.3333%]&lt;BR/&gt;{25.128.3.152:80, 167.223.0.81:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49162: (7.69231%)&lt;BR/&gt; 49159: (7.69231%)&lt;BR/&gt; 2401: (7.69231%)&lt;BR/&gt; 2386: (7.69231%)&gt;];
}
652--1242[label="0.8;4pkt 4fpkt"];
652--1663[label="1;5pkt 5fpkt"];
652--1881[label="0.8;4pkt 4fpkt"];
1242--1663[label="1;8pkt 8fpkt"];
1242--1881[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="155.59.32.139" src_ip="25.128.3.152" src_port="80"/>
      <filter dst_ip="160.90.195.20" src_ip="25.128.3.152" src_port="80"/>
      <filter dst_ip="167.223.0.81" src_ip="25.128.3.152" src_port="80"/>
    </slice>
    <from sec="989038924" usec="0"/>
    <to sec="989039616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_10{
style=filled;
color=gray75;
99[label="211.76.211.248;d;788pkt 788fpkt", shape=diamond, color=yellow];
227[label="167.223.0.80;s;296pkt 296fpkt", shape=diamond, color=yellow];
609[label="167.223.1.103;s;51pkt 51fpkt", shape=diamond, color=yellow];
1098[label="167.223.0.80;311pkt 311fpkt", shape=pentagon, color=darkviolet];
stat10[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.223.0.68:*, 211.76.211.248:3128}[41.6896%]&lt;BR/&gt;{167.223.0.80:*, *:*}[28.6501%]&lt;BR/&gt;{167.223.1.115:*, 211.76.211.248:3128}[20.2938%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (31.4315%)&lt;BR/&gt; 80: (13.6238%)&lt;BR/&gt; 443: (4.63347%)&lt;BR/&gt; 3130: (0.829876%)&lt;BR/&gt; 3424: (0.138313%)&gt;];
}
99--122[label="0.281726;222pkt 222fpkt"];
99--206[label="0.00253807;2pkt 2fpkt"];
99--227[label="0.118243;35pkt 35fpkt"];
99--327[label="0.118987;47pkt 47fpkt"];
99--598[label="0.577411;455pkt 455fpkt"];
99--609[label="0.529412;27pkt 27fpkt"];
99--781[label="0.150862;35pkt 35fpkt"];
99--791[label="0.162069;47pkt 47fpkt"];
99--1076[label="0.577411;455pkt 455fpkt"];
99--1098[label="0.11254;35pkt 35fpkt"];
227--548[label="0.227723;46pkt 46fpkt"];
227--781[label="1;232pkt 232fpkt"];
227--872[label="0.118243;35pkt 35fpkt"];
227--884[label="0.0439189;13pkt 13fpkt"];
227--889[label="0.118243;35pkt 35fpkt"];
227--901[label="0.0439189;13pkt 13fpkt"];
227--905[label="0.118243;35pkt 35fpkt"];
227--1098[label="0.996622;295pkt 295fpkt"];
</description>
    <slice>
      <filter src_ip="167.223.0.80"/>
      <filter dst_ip="211.76.211.248" dst_port="3128" src_ip="167.223.0.68"/>
      <filter dst_ip="211.76.211.248" dst_port="3128" src_ip="167.223.1.115"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_12{
style=filled;
color=gray75;
132[label="212.154.224.82;d;1pkt 1fpkt", shape=diamond, color=yellow];
133[label="216.122.204.179;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat12[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.122.204.179:0, 212.154.224.82:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
132--133[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.154.224.82" src_ip="216.122.204.179"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,501,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_13{
style=filled;
color=gray75;
142[label="216.162.194.105;d;1pkt 1fpkt", shape=diamond, color=yellow];
143[label="216.116.210.244;s;7pkt 7fpkt", shape=diamond, color=yellow];
1468[label="216.116.210.244;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat13[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.116.210.244:21, 157.96.200.149:*}[57.1429%]&lt;BR/&gt;{216.116.210.244:20, 157.96.200.149:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (28.5714%)&lt;BR/&gt; 20: (21.4286%)&lt;BR/&gt; 61057: (7.14286%)&lt;BR/&gt; 61056: (7.14286%)&lt;BR/&gt; 61055: (7.14286%)&gt;];
}
142--143[label="1;1pkt 1fpkt"];
143--431[label="0.857143;6pkt 6fpkt"];
143--1468[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="157.96.200.149" src_ip="216.116.210.244" src_port="21"/>
      <filter dst_ip="157.96.200.149" src_ip="216.116.210.244" src_port="20"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_17{
style=filled;
color=gray75;
54[label="216.115.217.19;d;1945pkt 1945fpkt", shape=diamond, color=yellow];
148[label="155.59.32.139;d;111pkt 111fpkt", shape=diamond, color=yellow];
155[label="216.168.123.78;d;490pkt 490fpkt", shape=diamond, color=yellow];
270[label="217.22.123.58;d;351pkt 351fpkt", shape=diamond, color=yellow];
349[label="148.119.210.174;s;1pkt 1fpkt", shape=diamond, color=yellow];
368[label="25.175.91.90;s;7pkt 7fpkt", shape=diamond, color=yellow];
379[label="85.166.147.33;s;2pkt 2fpkt", shape=diamond, color=yellow];
435[label="199.8.77.60;s;53pkt 53fpkt", shape=diamond, color=yellow];
439[label="155.59.218.133;d;22pkt 22fpkt", shape=diamond, color=yellow];
503[label="155.59.16.205;d;10pkt 10fpkt", shape=diamond, color=yellow];
516[label="25.239.161.13;s;18pkt 18fpkt", shape=diamond, color=yellow];
568[label="200.128.118.112;s;112pkt 112fpkt", shape=diamond, color=yellow];
655[label="221.161.246.160;s;1pkt 1fpkt", shape=diamond, color=yellow];
670[label="160.90.40.158;d;110pkt 110fpkt", shape=diamond, color=yellow];
700[label="160.90.222.20;d;49pkt 49fpkt", shape=diamond, color=yellow];
730[label="200.46.69.113;s;97pkt 97fpkt", shape=diamond, color=yellow];
741[label="200.35.181.50;s;2pkt 2fpkt", shape=diamond, color=yellow];
924[label="212.81.109.3;17pkt 17fpkt", shape=pentagon, color=darkviolet];
945[label="198.167.3.12;183pkt 183fpkt", shape=pentagon, color=darkviolet];
947[label="25.239.161.13;18pkt 18fpkt", shape=pentagon, color=darkviolet];
951[label="211.199.249.14;43pkt 43fpkt", shape=pentagon, color=darkviolet];
952[label="198.167.3.15;75pkt 75fpkt", shape=pentagon, color=darkviolet];
969[label="211.171.227.21;84pkt 84fpkt", shape=pentagon, color=darkviolet];
997[label="85.166.147.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1001[label="220.216.29.35;27pkt 27fpkt", shape=pentagon, color=darkviolet];
1004[label="200.179.12.36;16pkt 16fpkt", shape=pentagon, color=darkviolet];
1009[label="198.124.172.38;18pkt 18fpkt", shape=pentagon, color=darkviolet];
1027[label="25.175.91.42;8pkt 8fpkt", shape=pentagon, color=darkviolet];
1030[label="200.227.158.42;19pkt 19fpkt", shape=pentagon, color=darkviolet];
1034[label="211.132.120.44;88pkt 88fpkt", shape=pentagon, color=darkviolet];
1045[label="25.175.91.48;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1049[label="25.175.91.50;6pkt 6fpkt", shape=pentagon, color=darkviolet];
1050[label="200.35.181.50;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1051[label="212.81.109.51;82pkt 82fpkt", shape=pentagon, color=darkviolet];
1053[label="212.122.30.53;46pkt 46fpkt", shape=pentagon, color=darkviolet];
1062[label="137.4.139.58;10pkt 10fpkt", shape=pentagon, color=darkviolet];
1065[label="199.8.77.60;58pkt 58fpkt", shape=pentagon, color=darkviolet];
1086[label="25.175.91.74;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1089[label="25.175.91.75;7pkt 7fpkt", shape=pentagon, color=darkviolet];
1100[label="25.175.91.80;6pkt 6fpkt", shape=pentagon, color=darkviolet];
1110[label="25.175.91.86;7pkt 7fpkt", shape=pentagon, color=darkviolet];
1119[label="25.175.91.89;8pkt 8fpkt", shape=pentagon, color=darkviolet];
1122[label="200.192.90.90;25pkt 25fpkt", shape=pentagon, color=darkviolet];
1123[label="25.175.91.90;9pkt 9fpkt", shape=pentagon, color=darkviolet];
1133[label="212.113.235.94;27pkt 27fpkt", shape=pentagon, color=darkviolet];
1158[label="199.148.92.107;23pkt 23fpkt", shape=pentagon, color=darkviolet];
1164[label="222.41.161.111;30pkt 30fpkt", shape=pentagon, color=darkviolet];
1168[label="200.128.118.112;120pkt 120fpkt", shape=pentagon, color=darkviolet];
1170[label="200.46.69.113;102pkt 102fpkt", shape=pentagon, color=darkviolet];
1171[label="25.175.91.113;10pkt 10fpkt", shape=pentagon, color=darkviolet];
1173[label="211.171.224.114;65pkt 65fpkt", shape=pentagon, color=darkviolet];
1185[label="25.175.91.123;7pkt 7fpkt", shape=pentagon, color=darkviolet];
1191[label="221.144.82.125;57pkt 57fpkt", shape=pentagon, color=darkviolet];
1209[label="200.26.228.134;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1249[label="200.0.132.156;58pkt 58fpkt", shape=pentagon, color=darkviolet];
1260[label="211.138.98.161;71pkt 71fpkt", shape=pentagon, color=darkviolet];
1272[label="211.178.4.165;82pkt 82fpkt", shape=pentagon, color=darkviolet];
1323[label="85.130.28.185;18pkt 18fpkt", shape=pentagon, color=darkviolet];
1325[label="198.167.3.187;38pkt 38fpkt", shape=pentagon, color=darkviolet];
1334[label="220.250.10.193;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1352[label="219.137.75.200;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1357[label="211.165.55.201;71pkt 71fpkt", shape=pentagon, color=darkviolet];
1367[label="211.134.252.203;85pkt 85fpkt", shape=pentagon, color=darkviolet];
1377[label="200.222.104.208;34pkt 34fpkt", shape=pentagon, color=darkviolet];
1383[label="200.26.228.209;65pkt 65fpkt", shape=pentagon, color=darkviolet];
1403[label="222.100.190.215;31pkt 31fpkt", shape=pentagon, color=darkviolet];
1412[label="220.216.29.221;40pkt 40fpkt", shape=pentagon, color=darkviolet];
1429[label="25.239.174.226;17pkt 17fpkt", shape=pentagon, color=darkviolet];
1432[label="25.9.111.228;14pkt 14fpkt", shape=pentagon, color=darkviolet];
1445[label="216.16.113.231;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1473[label="25.9.111.246;10pkt 10fpkt", shape=pentagon, color=darkviolet];
1486[label="212.81.109.3;17pkt 17fpkt", shape=invtriangle, color=brown];
1503[label="211.199.249.14;43pkt 43fpkt", shape=invtriangle, color=brown];
1526[label="85.166.147.33;1pkt 1fpkt", shape=invtriangle, color=brown];
1527[label="220.216.29.35;28pkt 28fpkt", shape=invtriangle, color=brown];
1531[label="198.124.172.38;18pkt 18fpkt", shape=invtriangle, color=brown];
1543[label="25.175.91.42;7pkt 7fpkt", shape=invtriangle, color=brown];
1546[label="211.132.120.44;87pkt 87fpkt", shape=invtriangle, color=brown];
1552[label="25.175.91.50;7pkt 7fpkt", shape=invtriangle, color=brown];
1553[label="200.35.181.50;2pkt 2fpkt", shape=invtriangle, color=brown];
1554[label="212.81.109.51;82pkt 82fpkt", shape=invtriangle, color=brown];
1556[label="212.122.30.53;46pkt 46fpkt", shape=invtriangle, color=brown];
1563[label="137.4.139.58;10pkt 10fpkt", shape=invtriangle, color=brown];
1565[label="199.8.77.60;59pkt 59fpkt", shape=invtriangle, color=brown];
1579[label="25.175.91.74;6pkt 6fpkt", shape=invtriangle, color=brown];
1598[label="25.175.91.89;8pkt 8fpkt", shape=invtriangle, color=brown];
1600[label="25.175.91.90;9pkt 9fpkt", shape=invtriangle, color=brown];
1614[label="222.41.161.111;30pkt 30fpkt", shape=invtriangle, color=brown];
1617[label="200.128.118.112;120pkt 120fpkt", shape=invtriangle, color=brown];
1619[label="25.175.91.113;9pkt 9fpkt", shape=invtriangle, color=brown];
1641[label="200.26.228.134;13pkt 13fpkt", shape=invtriangle, color=brown];
1666[label="200.0.132.156;59pkt 59fpkt", shape=invtriangle, color=brown];
1682[label="211.178.4.165;81pkt 81fpkt", shape=invtriangle, color=brown];
1706[label="85.130.28.185;19pkt 19fpkt", shape=invtriangle, color=brown];
1707[label="198.167.3.187;38pkt 38fpkt", shape=invtriangle, color=brown];
1711[label="220.250.10.193;14pkt 14fpkt", shape=invtriangle, color=brown];
1723[label="211.165.55.201;71pkt 71fpkt", shape=invtriangle, color=brown];
1733[label="200.222.104.208;33pkt 33fpkt", shape=invtriangle, color=brown];
1737[label="200.26.228.209;65pkt 65fpkt", shape=invtriangle, color=brown];
1746[label="222.100.190.215;32pkt 32fpkt", shape=invtriangle, color=brown];
1751[label="220.216.29.221;40pkt 40fpkt", shape=invtriangle, color=brown];
1768[label="216.16.113.231;1pkt 1fpkt", shape=invtriangle, color=brown];
1780[label="25.9.111.246;11pkt 11fpkt", shape=invtriangle, color=brown];
1808[label="85.166.147.33;1pkt 1fpkt", shape=invhouse, color=bisque];
1818[label="200.35.181.50;2pkt 2fpkt", shape=invhouse, color=bisque];
1828[label="199.8.77.60;59pkt 59fpkt", shape=invhouse, color=bisque];
1852[label="212.113.235.94;28pkt 28fpkt", shape=invhouse, color=bisque];
1855[label="222.41.161.111;30pkt 30fpkt", shape=invhouse, color=bisque];
1856[label="200.128.118.112;120pkt 120fpkt", shape=invhouse, color=bisque];
1858[label="200.46.69.113;99pkt 99fpkt", shape=invhouse, color=bisque];
1859[label="25.175.91.113;10pkt 10fpkt", shape=invhouse, color=bisque];
1880[label="220.177.59.148;22pkt 22fpkt", shape=invhouse, color=bisque];
1883[label="200.0.132.156;58pkt 58fpkt", shape=invhouse, color=bisque];
1893[label="211.178.4.165;82pkt 82fpkt", shape=invhouse, color=bisque];
1909[label="85.130.28.185;19pkt 19fpkt", shape=invhouse, color=bisque];
1912[label="220.250.10.193;14pkt 14fpkt", shape=invhouse, color=bisque];
1919[label="211.165.55.201;71pkt 71fpkt", shape=invhouse, color=bisque];
1926[label="200.222.104.208;34pkt 34fpkt", shape=invhouse, color=bisque];
1933[label="222.100.190.215;31pkt 31fpkt", shape=invhouse, color=bisque];
1949[label="25.192.94.244;35pkt 35fpkt", shape=invhouse, color=bisque];
1950[label="25.9.111.246;10pkt 10fpkt", shape=invhouse, color=bisque];
stat17[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 216.115.217.19:*}[33.6479%]&lt;BR/&gt;{*:53, *:*}[21.2888%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.4496%)&lt;BR/&gt; 53: (11.3948%)&lt;BR/&gt; 10000: (3.6164%)&lt;BR/&gt; 17027: (2.01455%)&lt;BR/&gt; 0: (0.727476%)&gt;];
}
54--56[label="1;2pkt 2fpkt"];
54--157[label="0.133333;4pkt 4fpkt"];
54--349[label="1;1pkt 1fpkt"];
54--368[label="0.285714;2pkt 2fpkt"];
54--370[label="0.00990099;1pkt 1fpkt"];
54--377[label="1;14pkt 14fpkt"];
54--379[label="1;2pkt 2fpkt"];
54--428[label="0.285714;2pkt 2fpkt"];
54--429[label="0.1;1pkt 1fpkt"];
54--435[label="1;53pkt 53fpkt"];
54--485[label="0.11875;19pkt 19fpkt"];
54--516[label="0.111111;2pkt 2fpkt"];
54--566[label="0.0204082;4pkt 4fpkt"];
54--568[label="0.205357;23pkt 23fpkt"];
54--597[label="1;165pkt 165fpkt"];
54--641[label="0.1875;3pkt 3fpkt"];
54--653[label="1;39pkt 39fpkt"];
54--716[label="0.0434783;1pkt 1fpkt"];
54--730[label="0.0206186;2pkt 2fpkt"];
54--741[label="1;2pkt 2fpkt"];
54--784[label="0.00990099;1pkt 1fpkt"];
54--832[label="0.214286;3pkt 3fpkt"];
54--840[label="1;38pkt 38fpkt"];
54--844[label="0.0434783;1pkt 1fpkt"];
54--864[label="0.0353649;47pkt 47fpkt"];
54--870[label="0.00297442;5pkt 5fpkt"];
54--871[label="0.00514139;10pkt 10fpkt"];
54--876[label="0.00462725;9pkt 9fpkt"];
54--882[label="0.0353649;47pkt 47fpkt"];
54--887[label="0.00297442;5pkt 5fpkt"];
54--888[label="0.00514139;10pkt 10fpkt"];
54--893[label="0.00462725;9pkt 9fpkt"];
54--899[label="0.0353649;47pkt 47fpkt"];
54--903[label="0.00297442;5pkt 5fpkt"];
54--904[label="0.00514139;10pkt 10fpkt"];
54--909[label="0.00462725;9pkt 9fpkt"];
54--924[label="0.705882;12pkt 12fpkt"];
54--932[label="0.142857;1pkt 1fpkt"];
54--945[label="0.103825;19pkt 19fpkt"];
54--947[label="0.0555556;1pkt 1fpkt"];
54--951[label="0.0697674;3pkt 3fpkt"];
54--952[label="0.213333;16pkt 16fpkt"];
54--969[label="0.047619;4pkt 4fpkt"];
54--988[label="1;7pkt 7fpkt"];
54--997[label="1;1pkt 1fpkt"];
54--1001[label="0.333333;9pkt 9fpkt"];
54--1004[label="0.125;2pkt 2fpkt"];
54--1009[label="1;18pkt 18fpkt"];
54--1012[label="0.0769231;1pkt 1fpkt"];
54--1027[label="0.375;3pkt 3fpkt"];
54--1030[label="1;19pkt 19fpkt"];
54--1034[label="0.0227273;2pkt 2fpkt"];
54--1045[label="0.2;1pkt 1fpkt"];
54--1049[label="0.333333;2pkt 2fpkt"];
54--1050[label="1;2pkt 2fpkt"];
54--1051[label="0.54878;45pkt 45fpkt"];
54--1053[label="0.0652174;3pkt 3fpkt"];
54--1062[label="0.7;7pkt 7fpkt"];
54--1065[label="0.896552;52pkt 52fpkt"];
54--1083[label="0.333333;2pkt 2fpkt"];
54--1086[label="0.2;1pkt 1fpkt"];
54--1089[label="0.714286;5pkt 5fpkt"];
54--1104[label="0.0166667;1pkt 1fpkt"];
54--1119[label="0.25;2pkt 2fpkt"];
54--1122[label="1;25pkt 25fpkt"];
54--1123[label="0.222222;2pkt 2fpkt"];
54--1133[label="0.0740741;2pkt 2fpkt"];
54--1143[label="0.0199005;4pkt 4fpkt"];
54--1145[label="1;13pkt 13fpkt"];
54--1158[label="0.0434783;1pkt 1fpkt"];
54--1164[label="0.0666667;2pkt 2fpkt"];
54--1168[label="0.191667;23pkt 23fpkt"];
54--1170[label="0.0196078;2pkt 2fpkt"];
54--1171[label="0.1;1pkt 1fpkt"];
54--1173[label="0.0307692;2pkt 2fpkt"];
54--1178[label="1;39pkt 39fpkt"];
54--1185[label="0.428571;3pkt 3fpkt"];
54--1191[label="0.859649;49pkt 49fpkt"];
54--1209[label="1;13pkt 13fpkt"];
54--1249[label="1;58pkt 58fpkt"];
54--1260[label="0.028169;2pkt 2fpkt"];
54--1272[label="0.0243902;2pkt 2fpkt"];
54--1323[label="0.0555556;1pkt 1fpkt"];
54--1325[label="0.157895;6pkt 6fpkt"];
54--1334[label="1;13pkt 13fpkt"];
54--1352[label="1;1pkt 1fpkt"];
54--1357[label="0.028169;2pkt 2fpkt"];
54--1367[label="0.0235294;2pkt 2fpkt"];
54--1383[label="1;65pkt 65fpkt"];
54--1403[label="0.548387;17pkt 17fpkt"];
54--1412[label="0.05;2pkt 2fpkt"];
54--1429[label="0.0588235;1pkt 1fpkt"];
54--1432[label="0.142857;2pkt 2fpkt"];
54--1442[label="1;3pkt 3fpkt"];
54--1445[label="1;1pkt 1fpkt"];
54--1473[label="0.1;1pkt 1fpkt"];
54--1486[label="0.705882;12pkt 12fpkt"];
54--1501[label="0.104972;19pkt 19fpkt"];
54--1503[label="0.0697674;3pkt 3fpkt"];
54--1526[label="1;1pkt 1fpkt"];
54--1527[label="0.321429;9pkt 9fpkt"];
54--1531[label="1;18pkt 18fpkt"];
54--1543[label="0.428571;3pkt 3fpkt"];
54--1546[label="0.0229885;2pkt 2fpkt"];
54--1552[label="0.285714;2pkt 2fpkt"];
54--1553[label="1;2pkt 2fpkt"];
54--1554[label="0.54878;45pkt 45fpkt"];
54--1556[label="0.0652174;3pkt 3fpkt"];
54--1563[label="0.7;7pkt 7fpkt"];
54--1565[label="0.898305;53pkt 53fpkt"];
54--1576[label="0.333333;2pkt 2fpkt"];
54--1579[label="0.166667;1pkt 1fpkt"];
54--1588[label="0.0166667;1pkt 1fpkt"];
54--1598[label="0.25;2pkt 2fpkt"];
54--1600[label="0.222222;2pkt 2fpkt"];
54--1614[label="0.0666667;2pkt 2fpkt"];
54--1617[label="0.191667;23pkt 23fpkt"];
54--1619[label="0.111111;1pkt 1fpkt"];
54--1622[label="1;39pkt 39fpkt"];
54--1641[label="1;13pkt 13fpkt"];
54--1666[label="1;59pkt 59fpkt"];
54--1682[label="0.0246914;2pkt 2fpkt"];
54--1683[label="0.1;1pkt 1fpkt"];
54--1706[label="0.0526316;1pkt 1fpkt"];
54--1707[label="0.157895;6pkt 6fpkt"];
54--1711[label="1;14pkt 14fpkt"];
54--1723[label="0.028169;2pkt 2fpkt"];
54--1737[label="1;65pkt 65fpkt"];
54--1746[label="0.5625;18pkt 18fpkt"];
54--1751[label="0.05;2pkt 2fpkt"];
54--1765[label="1;3pkt 3fpkt"];
54--1768[label="1;1pkt 1fpkt"];
54--1780[label="0.0909091;1pkt 1fpkt"];
54--1808[label="1;1pkt 1fpkt"];
54--1818[label="1;2pkt 2fpkt"];
54--1828[label="0.898305;53pkt 53fpkt"];
54--1842[label="0.0169492;1pkt 1fpkt"];
54--1852[label="0.0714286;2pkt 2fpkt"];
54--1855[label="0.0666667;2pkt 2fpkt"];
54--1856[label="0.191667;23pkt 23fpkt"];
54--1858[label="0.020202;2pkt 2fpkt"];
54--1859[label="0.1;1pkt 1fpkt"];
54--1883[label="1;58pkt 58fpkt"];
54--1893[label="0.0243902;2pkt 2fpkt"];
54--1909[label="0.0526316;1pkt 1fpkt"];
54--1912[label="1;14pkt 14fpkt"];
54--1919[label="0.028169;2pkt 2fpkt"];
54--1933[label="0.548387;17pkt 17fpkt"];
54--1949[label="0.771429;27pkt 27fpkt"];
54--1950[label="0.1;1pkt 1fpkt"];
148--149[label="1;93pkt 93fpkt"];
148--864[label="0.018018;2pkt 2fpkt"];
148--882[label="0.018018;2pkt 2fpkt"];
148--899[label="0.018018;2pkt 2fpkt"];
148--929[label="1;93pkt 93fpkt"];
148--1051[label="0.0243902;2pkt 2fpkt"];
148--1242[label="0.5;4pkt 4fpkt"];
148--1554[label="0.0243902;2pkt 2fpkt"];
148--1663[label="0.444444;4pkt 4fpkt"];
148--1881[label="0.5;4pkt 4fpkt"];
155--166[label="0.0146199;5pkt 5fpkt"];
155--368[label="0.428571;3pkt 3fpkt"];
155--428[label="0.142857;1pkt 1fpkt"];
155--566[label="0.765306;150pkt 150fpkt"];
155--655[label="1;1pkt 1fpkt"];
155--730[label="0.659794;64pkt 64fpkt"];
155--828[label="0.0149254;4pkt 4fpkt"];
155--864[label="0.00204082;1pkt 1fpkt"];
155--882[label="0.00204082;1pkt 1fpkt"];
155--899[label="0.00204082;1pkt 1fpkt"];
155--1049[label="0.333333;2pkt 2fpkt"];
155--1083[label="0.166667;1pkt 1fpkt"];
155--1086[label="0.2;1pkt 1fpkt"];
155--1110[label="0.142857;1pkt 1fpkt"];
155--1119[label="0.125;1pkt 1fpkt"];
155--1123[label="0.333333;3pkt 3fpkt"];
155--1143[label="0.746269;150pkt 150fpkt"];
155--1167[label="0.462555;105pkt 105fpkt"];
155--1170[label="0.627451;64pkt 64fpkt"];
155--1171[label="0.5;5pkt 5fpkt"];
155--1474[label="0.013089;5pkt 5fpkt"];
155--1552[label="0.285714;2pkt 2fpkt"];
155--1576[label="0.166667;1pkt 1fpkt"];
155--1579[label="0.166667;1pkt 1fpkt"];
155--1598[label="0.125;1pkt 1fpkt"];
155--1600[label="0.333333;3pkt 3fpkt"];
155--1615[label="0.462555;105pkt 105fpkt"];
155--1619[label="0.555556;5pkt 5fpkt"];
155--1781[label="0.013089;5pkt 5fpkt"];
155--1858[label="0.626263;62pkt 62fpkt"];
155--1859[label="0.5;5pkt 5fpkt"];
155--1951[label="0.0131234;5pkt 5fpkt"];
270--368[label="0.142857;1pkt 1fpkt"];
270--426[label="0.16129;5pkt 5fpkt"];
270--428[label="0.571429;4pkt 4fpkt"];
270--485[label="0.05625;9pkt 9fpkt"];
270--568[label="0.0714286;8pkt 8fpkt"];
270--783[label="0.16129;5pkt 5fpkt"];
270--828[label="0.320896;86pkt 86fpkt"];
270--864[label="0.048433;17pkt 17fpkt"];
270--882[label="0.048433;17pkt 17fpkt"];
270--899[label="0.048433;17pkt 17fpkt"];
270--945[label="0.0437158;8pkt 8fpkt"];
270--952[label="0.12;9pkt 9fpkt"];
270--1027[label="0.5;4pkt 4fpkt"];
270--1045[label="0.4;2pkt 2fpkt"];
270--1049[label="0.333333;2pkt 2fpkt"];
270--1083[label="0.5;3pkt 3fpkt"];
270--1086[label="0.6;3pkt 3fpkt"];
270--1089[label="0.285714;2pkt 2fpkt"];
270--1100[label="0.833333;5pkt 5fpkt"];
270--1110[label="0.714286;5pkt 5fpkt"];
270--1119[label="0.625;5pkt 5fpkt"];
270--1123[label="0.333333;3pkt 3fpkt"];
270--1168[label="0.0666667;8pkt 8fpkt"];
270--1171[label="0.4;4pkt 4fpkt"];
270--1185[label="0.428571;3pkt 3fpkt"];
270--1325[label="0.0526316;2pkt 2fpkt"];
270--1330[label="0.0980392;5pkt 5fpkt"];
270--1377[label="0.882353;30pkt 30fpkt"];
270--1474[label="0.327635;115pkt 115fpkt"];
270--1501[label="0.0497238;9pkt 9fpkt"];
270--1543[label="0.428571;3pkt 3fpkt"];
270--1552[label="0.428571;3pkt 3fpkt"];
270--1576[label="0.5;3pkt 3fpkt"];
270--1579[label="0.5;3pkt 3fpkt"];
270--1598[label="0.625;5pkt 5fpkt"];
270--1600[label="0.333333;3pkt 3fpkt"];
270--1617[label="0.0666667;8pkt 8fpkt"];
270--1619[label="0.333333;3pkt 3fpkt"];
270--1707[label="0.0526316;2pkt 2fpkt"];
270--1709[label="0.0980392;5pkt 5fpkt"];
270--1733[label="0.878788;29pkt 29fpkt"];
270--1781[label="0.327635;115pkt 115fpkt"];
270--1856[label="0.0666667;8pkt 8fpkt"];
270--1859[label="0.4;4pkt 4fpkt"];
270--1880[label="0.0454545;1pkt 1fpkt"];
270--1926[label="0.882353;30pkt 30fpkt"];
270--1949[label="0.0571429;2pkt 2fpkt"];
270--1951[label="0.324786;114pkt 114fpkt"];
368--503[label="0.142857;1pkt 1fpkt"];
368--1123[label="1;7pkt 7fpkt"];
368--1600[label="1;7pkt 7fpkt"];
379--997[label="1;1pkt 1fpkt"];
379--1526[label="1;1pkt 1fpkt"];
379--1808[label="1;1pkt 1fpkt"];
435--864[label="0.264151;14pkt 14fpkt"];
435--882[label="0.264151;14pkt 14fpkt"];
435--899[label="0.264151;14pkt 14fpkt"];
435--1065[label="0.981132;52pkt 52fpkt"];
435--1565[label="1;53pkt 53fpkt"];
435--1828[label="1;53pkt 53fpkt"];
439--516[label="0.611111;11pkt 11fpkt"];
439--864[label="0.0454545;1pkt 1fpkt"];
439--882[label="0.0454545;1pkt 1fpkt"];
439--899[label="0.0454545;1pkt 1fpkt"];
439--947[label="0.611111;11pkt 11fpkt"];
439--1004[label="0.1875;3pkt 3fpkt"];
439--1429[label="0.176471;3pkt 3fpkt"];
503--864[label="0.1;1pkt 1fpkt"];
503--882[label="0.1;1pkt 1fpkt"];
503--899[label="0.1;1pkt 1fpkt"];
503--1045[label="0.2;1pkt 1fpkt"];
503--1100[label="0.166667;1pkt 1fpkt"];
503--1110[label="0.142857;1pkt 1fpkt"];
503--1123[label="0.111111;1pkt 1fpkt"];
503--1185[label="0.142857;1pkt 1fpkt"];
503--1600[label="0.111111;1pkt 1fpkt"];
516--864[label="0.0555556;1pkt 1fpkt"];
516--882[label="0.0555556;1pkt 1fpkt"];
516--899[label="0.0555556;1pkt 1fpkt"];
516--947[label="0.944444;17pkt 17fpkt"];
568--728[label="0.231884;16pkt 16fpkt"];
568--864[label="0.0982143;11pkt 11fpkt"];
568--882[label="0.0982143;11pkt 11fpkt"];
568--899[label="0.0982143;11pkt 11fpkt"];
568--1168[label="1;112pkt 112fpkt"];
568--1617[label="1;112pkt 112fpkt"];
568--1856[label="1;112pkt 112fpkt"];
670--952[label="0.0133333;1pkt 1fpkt"];
700--1164[label="0.566667;17pkt 17fpkt"];
700--1403[label="0.225806;7pkt 7fpkt"];
700--1614[label="0.566667;17pkt 17fpkt"];
700--1746[label="0.21875;7pkt 7fpkt"];
700--1855[label="0.566667;17pkt 17fpkt"];
700--1933[label="0.225806;7pkt 7fpkt"];
730--1170[label="1;97pkt 97fpkt"];
730--1858[label="0.979381;95pkt 95fpkt"];
741--1050[label="1;2pkt 2fpkt"];
741--1553[label="1;2pkt 2fpkt"];
741--1818[label="1;2pkt 2fpkt"];
924--1486[label="1;17pkt 17fpkt"];
945--1501[label="0.994475;180pkt 180fpkt"];
951--1503[label="1;43pkt 43fpkt"];
997--1526[label="1;1pkt 1fpkt"];
997--1808[label="1;1pkt 1fpkt"];
1001--1527[label="1;27pkt 27fpkt"];
1009--1531[label="1;18pkt 18fpkt"];
1027--1543[label="1;7pkt 7fpkt"];
1034--1546[label="1;87pkt 87fpkt"];
1049--1552[label="1;6pkt 6fpkt"];
1050--1553[label="1;2pkt 2fpkt"];
1050--1818[label="1;2pkt 2fpkt"];
1051--1554[label="1;82pkt 82fpkt"];
1053--1556[label="1;46pkt 46fpkt"];
1062--1563[label="1;10pkt 10fpkt"];
1065--1565[label="1;58pkt 58fpkt"];
1065--1828[label="1;58pkt 58fpkt"];
1086--1579[label="1;5pkt 5fpkt"];
1119--1598[label="1;8pkt 8fpkt"];
1123--1600[label="1;9pkt 9fpkt"];
1133--1852[label="1;27pkt 27fpkt"];
1164--1614[label="1;30pkt 30fpkt"];
1164--1855[label="1;30pkt 30fpkt"];
1168--1617[label="1;120pkt 120fpkt"];
1168--1856[label="1;120pkt 120fpkt"];
1170--1858[label="1;99pkt 99fpkt"];
1171--1619[label="1;9pkt 9fpkt"];
1171--1859[label="1;10pkt 10fpkt"];
1209--1641[label="1;13pkt 13fpkt"];
1249--1666[label="1;58pkt 58fpkt"];
1249--1883[label="1;58pkt 58fpkt"];
1272--1682[label="1;81pkt 81fpkt"];
1272--1893[label="1;82pkt 82fpkt"];
1323--1706[label="1;18pkt 18fpkt"];
1323--1909[label="1;18pkt 18fpkt"];
1325--1707[label="1;38pkt 38fpkt"];
1334--1711[label="1;13pkt 13fpkt"];
1334--1912[label="1;13pkt 13fpkt"];
1357--1723[label="1;71pkt 71fpkt"];
1357--1919[label="1;71pkt 71fpkt"];
1377--1733[label="1;33pkt 33fpkt"];
1377--1926[label="1;34pkt 34fpkt"];
1383--1737[label="1;65pkt 65fpkt"];
1403--1746[label="1;31pkt 31fpkt"];
1403--1933[label="1;31pkt 31fpkt"];
1412--1751[label="1;40pkt 40fpkt"];
1445--1768[label="1;1pkt 1fpkt"];
1473--1780[label="1;10pkt 10fpkt"];
1473--1950[label="1;10pkt 10fpkt"];
1526--1808[label="1;1pkt 1fpkt"];
1553--1818[label="1;2pkt 2fpkt"];
1565--1828[label="1;59pkt 59fpkt"];
1614--1855[label="1;30pkt 30fpkt"];
1617--1856[label="1;120pkt 120fpkt"];
1619--1859[label="1;9pkt 9fpkt"];
1666--1883[label="1;58pkt 58fpkt"];
1682--1893[label="1;81pkt 81fpkt"];
1706--1909[label="1;19pkt 19fpkt"];
1711--1912[label="1;14pkt 14fpkt"];
1723--1919[label="1;71pkt 71fpkt"];
1733--1926[label="1;33pkt 33fpkt"];
1746--1933[label="1;31pkt 31fpkt"];
1780--1950[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_port="53"/>
      <filter dst_ip="216.115.217.19" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.79134,1.69321,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_18{
style=filled;
color=gray75;
94[label="155.59.133.56;s;166pkt 166fpkt", shape=diamond, color=yellow];
165[label="200.46.20.248;d;343pkt 343fpkt", shape=diamond, color=yellow];
167[label="160.90.241.235;s;88pkt 88fpkt", shape=diamond, color=yellow];
412[label="155.59.230.136;s;170pkt 170fpkt", shape=diamond, color=yellow];
482[label="216.168.123.78;s;454pkt 454fpkt", shape=diamond, color=yellow];
654[label="221.161.246.160;d;1pkt 1fpkt", shape=diamond, color=yellow];
691[label="200.46.69.137;d;58pkt 58fpkt", shape=diamond, color=yellow];
797[label="216.168.123.78;s;258pkt 258fpkt", shape=hexagon, color=black];
1215[label="155.59.230.136;169pkt 169fpkt", shape=pentagon, color=darkviolet];
stat18[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 200.46.20.248:80}[32.2672%]&lt;BR/&gt;{216.168.123.78:*, *:10000}[20.1317%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.2244%)&lt;BR/&gt; 10000: (13.5911%)&lt;BR/&gt; 123: (2.72408%)&lt;BR/&gt; 53: (2.05038%)&lt;BR/&gt; 0: (0.410076%)&gt;];
}
94--165[label="0.331325;55pkt 55fpkt"];
94--169[label="1;50pkt 50fpkt"];
94--565[label="0.0180723;3pkt 3fpkt"];
94--691[label="0.0517241;3pkt 3fpkt"];
94--872[label="0.0361446;6pkt 6fpkt"];
94--884[label="0.0180723;3pkt 3fpkt"];
94--889[label="0.0361446;6pkt 6fpkt"];
94--901[label="0.0180723;3pkt 3fpkt"];
94--905[label="0.0361446;6pkt 6fpkt"];
165--167[label="0.920455;81pkt 81fpkt"];
165--412[label="0.129412;22pkt 22fpkt"];
165--482[label="0.0145773;5pkt 5fpkt"];
165--698[label="0.626866;42pkt 42fpkt"];
165--774[label="0.804878;33pkt 33fpkt"];
165--797[label="0.0155039;4pkt 4fpkt"];
165--872[label="0.03207;11pkt 11fpkt"];
165--884[label="0.0379009;13pkt 13fpkt"];
165--889[label="0.03207;11pkt 11fpkt"];
165--901[label="0.0379009;13pkt 13fpkt"];
165--905[label="0.03207;11pkt 11fpkt"];
165--1215[label="0.130178;22pkt 22fpkt"];
167--565[label="0.0227273;2pkt 2fpkt"];
167--872[label="0.0454545;4pkt 4fpkt"];
167--884[label="0.0568182;5pkt 5fpkt"];
167--889[label="0.0454545;4pkt 4fpkt"];
167--901[label="0.0568182;5pkt 5fpkt"];
167--905[label="0.0454545;4pkt 4fpkt"];
412--565[label="0.2;34pkt 34fpkt"];
412--679[label="0.0185185;2pkt 2fpkt"];
412--691[label="0.862069;50pkt 50fpkt"];
412--872[label="0.0411765;7pkt 7fpkt"];
412--884[label="0.0705882;12pkt 12fpkt"];
412--889[label="0.0411765;7pkt 7fpkt"];
412--901[label="0.0705882;12pkt 12fpkt"];
412--905[label="0.0411765;7pkt 7fpkt"];
412--1215[label="1;169pkt 169fpkt"];
482--565[label="0.765306;150pkt 150fpkt"];
482--654[label="1;1pkt 1fpkt"];
482--797[label="1;258pkt 258fpkt"];
482--871[label="0.00660793;3pkt 3fpkt"];
482--872[label="0.00220264;1pkt 1fpkt"];
482--876[label="0.00440529;2pkt 2fpkt"];
482--884[label="0.00220264;1pkt 1fpkt"];
482--888[label="0.00660793;3pkt 3fpkt"];
482--889[label="0.00220264;1pkt 1fpkt"];
482--893[label="0.00440529;2pkt 2fpkt"];
482--901[label="0.00220264;1pkt 1fpkt"];
482--904[label="0.00660793;3pkt 3fpkt"];
482--905[label="0.00220264;1pkt 1fpkt"];
482--909[label="0.00440529;2pkt 2fpkt"];
691--698[label="0.0689655;4pkt 4fpkt"];
691--870[label="0.0172414;1pkt 1fpkt"];
691--872[label="0.12069;7pkt 7fpkt"];
691--884[label="0.172414;10pkt 10fpkt"];
691--887[label="0.0172414;1pkt 1fpkt"];
691--889[label="0.12069;7pkt 7fpkt"];
691--901[label="0.172414;10pkt 10fpkt"];
691--903[label="0.0172414;1pkt 1fpkt"];
691--905[label="0.12069;7pkt 7fpkt"];
691--1215[label="0.862069;50pkt 50fpkt"];
797--871[label="0.0116279;3pkt 3fpkt"];
797--872[label="0.00387597;1pkt 1fpkt"];
797--884[label="0.00387597;1pkt 1fpkt"];
797--888[label="0.0116279;3pkt 3fpkt"];
797--889[label="0.00387597;1pkt 1fpkt"];
797--901[label="0.00387597;1pkt 1fpkt"];
797--904[label="0.0116279;3pkt 3fpkt"];
797--905[label="0.00387597;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="10000" src_ip="216.168.123.78"/>
      <filter dst_ip="200.46.20.248" dst_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="200.100.24.238"/>
      <from sec="989038841" usec="0"/>
      <to sec="989038951" usec="0"/>
    </slice>
    <from sec="989038841" usec="0"/>
    <to sec="989038951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636061,1.75765,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_20{
style=filled;
color=gray75;
59[label="155.59.167.40;s;2pkt 2fpkt", shape=diamond, color=yellow];
176[label="152.22.2.113;d;1pkt 1fpkt", shape=diamond, color=yellow];
220[label="24.22.114.47;d;1pkt 1fpkt", shape=diamond, color=yellow];
1537[label="155.59.167.40;1pkt 1fpkt", shape=invtriangle, color=brown];
stat20[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.59.167.40:1088, 24.22.114.47:6688}[50%]&lt;BR/&gt;{155.59.167.40:1087, 152.22.2.113:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6688: (30%)&lt;BR/&gt; 1088: (30%)&lt;BR/&gt; 6699: (20%)&lt;BR/&gt; 1087: (20%)&gt;];
}
59--176[label="1;1pkt 1fpkt"];
59--220[label="1;1pkt 1fpkt"];
59--1537[label="1;1pkt 1fpkt"];
220--1537[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.22.2.113" dst_port="6699" src_ip="155.59.167.40" src_port="1087"/>
      <filter dst_ip="24.22.114.47" dst_port="6688" src_ip="155.59.167.40" src_port="1088"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_21{
style=filled;
color=gray75;
179[label="130.202.209.241;d;5pkt 5fpkt", shape=diamond, color=yellow];
180[label="216.3.47.108;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat21[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.128.22.170:1863, 130.202.209.241:1028}[20%]&lt;BR/&gt;{216.196.26.50:80, 130.202.209.241:1606}[20%]&lt;BR/&gt;{216.196.26.50:80, 130.202.209.241:1607}[20%]&lt;BR/&gt;{216.3.47.108:1755, 130.202.209.241:1065}[20%]&lt;BR/&gt;{216.3.47.108:3436, 130.202.209.241:1070}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3436: (14.2857%)&lt;BR/&gt; 1755: (14.2857%)&lt;BR/&gt; 1070: (14.2857%)&lt;BR/&gt; 1065: (14.2857%)&lt;BR/&gt; 80: (14.2857%)&gt;];
}
179--180[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.209.241" dst_port="1070" src_ip="216.3.47.108" src_port="3436"/>
      <filter dst_ip="130.202.209.241" dst_port="1065" src_ip="216.3.47.108" src_port="1755"/>
      <filter dst_ip="130.202.209.241" dst_port="1607" src_ip="216.196.26.50" src_port="80"/>
      <filter dst_ip="130.202.209.241" dst_port="1606" src_ip="216.196.26.50" src_port="80"/>
      <filter dst_ip="130.202.209.241" dst_port="1028" src_ip="25.128.22.170" src_port="1863"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_22{
style=filled;
color=gray75;
189[label="167.223.7.196;d;96pkt 96fpkt", shape=diamond, color=yellow];
stat22[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.12.221.124:10080, 167.223.7.196:*}[95.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10080: (47.9167%)&lt;BR/&gt; 3130: (1.04167%)&lt;BR/&gt; 25: (1.04167%)&lt;BR/&gt; 5748: (0.520833%)&lt;BR/&gt; 5630: (0.520833%)&gt;];
}
189--875[label="0.0104167;1pkt 1fpkt"];
189--892[label="0.0104167;1pkt 1fpkt"];
189--908[label="0.0104167;1pkt 1fpkt"];
189--1084[label="0.0104167;1pkt 1fpkt"];
189--1187[label="0.958333;92pkt 92fpkt"];
189--1577[label="0.0104167;1pkt 1fpkt"];
189--1835[label="0.0104167;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.7.196" src_ip="210.12.221.124" src_port="10080"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576123,1.72015,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_23{
style=filled;
color=gray75;
65[label="155.59.208.17;d;78pkt 78fpkt", shape=diamond, color=yellow];
190[label="70.176.174.205;s;1pkt 1fpkt", shape=diamond, color=yellow];
230[label="70.65.6.60;s;1pkt 1fpkt", shape=diamond, color=yellow];
250[label="70.35.115.58;s;1pkt 1fpkt", shape=diamond, color=yellow];
253[label="25.146.5.73;s;1pkt 1fpkt", shape=diamond, color=yellow];
293[label="157.96.200.152;d;27pkt 27fpkt", shape=diamond, color=yellow];
399[label="193.222.113.34;s;1pkt 1fpkt", shape=diamond, color=yellow];
919[label="221.24.44.2;9pkt 9fpkt", shape=pentagon, color=darkviolet];
1148[label="70.254.214.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1484[label="221.24.44.2;9pkt 9fpkt", shape=invtriangle, color=brown];
1599[label="102.41.146.89;1pkt 1fpkt", shape=invtriangle, color=brown];
1611[label="200.74.136.104;1pkt 1fpkt", shape=invtriangle, color=brown];
1757[label="198.53.33.226;35pkt 35fpkt", shape=invtriangle, color=brown];
stat23[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 155.59.208.17:*}[33.3333%]&lt;BR/&gt;{198.53.33.226:80, *:*}[23.6111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.253%)&lt;BR/&gt; 6346: (9.33735%)&lt;BR/&gt; 0: (1.20482%)&lt;BR/&gt; 26276: (0.903614%)&lt;BR/&gt; 6347: (0.903614%)&gt;];
}
65--79[label="1;1pkt 1fpkt"];
65--190[label="1;1pkt 1fpkt"];
65--230[label="1;1pkt 1fpkt"];
65--250[label="1;1pkt 1fpkt"];
65--253[label="1;1pkt 1fpkt"];
65--399[label="1;1pkt 1fpkt"];
65--779[label="1;1pkt 1fpkt"];
65--864[label="0.0128205;1pkt 1fpkt"];
65--882[label="0.0128205;1pkt 1fpkt"];
65--899[label="0.0128205;1pkt 1fpkt"];
65--919[label="0.111111;1pkt 1fpkt"];
65--1108[label="0.511111;23pkt 23fpkt"];
65--1148[label="1;1pkt 1fpkt"];
65--1484[label="0.111111;1pkt 1fpkt"];
65--1599[label="1;1pkt 1fpkt"];
65--1611[label="1;1pkt 1fpkt"];
65--1757[label="0.0571429;2pkt 2fpkt"];
293--919[label="0.222222;2pkt 2fpkt"];
293--1484[label="0.222222;2pkt 2fpkt"];
919--1484[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="198.53.33.226" src_port="80"/>
      <filter dst_ip="155.59.208.17" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_25{
style=filled;
color=gray75;
85[label="160.90.140.184;d;24pkt 24fpkt", shape=diamond, color=yellow];
197[label="198.21.205.184;s;2pkt 2fpkt", shape=diamond, color=yellow];
1320[label="198.21.205.184;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat25[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.1.134.219:19030, 160.90.140.184:*}[58.3333%]&lt;BR/&gt;{200.1.134.219:80, 160.90.140.184:*}[29.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19030: (25%)&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 18639: (5.35714%)&lt;BR/&gt; 18638: (5.35714%)&lt;BR/&gt; 5001: (5.35714%)&gt;];
}
85--197[label="1;2pkt 2fpkt"];
85--864[label="0.0416667;1pkt 1fpkt"];
85--882[label="0.0416667;1pkt 1fpkt"];
85--899[label="0.0416667;1pkt 1fpkt"];
85--1320[label="1;2pkt 2fpkt"];
197--1320[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="160.90.140.184" src_ip="200.1.134.219" src_port="19030"/>
      <filter dst_ip="160.90.140.184" src_ip="200.1.134.219" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.79134,1.69321,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_26{
style=filled;
color=gray75;
88[label="199.61.34.207;d;1pkt 1fpkt", shape=diamond, color=yellow];
195[label="217.22.121.166;s;73pkt 73fpkt", shape=diamond, color=yellow];
196[label="24.90.247.161;d;1pkt 1fpkt", shape=diamond, color=yellow];
205[label="217.6.165.223;d;4pkt 4fpkt", shape=diamond, color=yellow];
211[label="198.21.228.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
231[label="209.1.50.64;d;1pkt 1fpkt", shape=diamond, color=yellow];
233[label="137.141.88.135;d;1pkt 1fpkt", shape=diamond, color=yellow];
243[label="161.77.19.161;d;1pkt 1fpkt", shape=diamond, color=yellow];
244[label="199.11.254.37;d;1pkt 1fpkt", shape=diamond, color=yellow];
251[label="26.142.41.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
264[label="199.57.141.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
312[label="199.57.116.43;d;1pkt 1fpkt", shape=diamond, color=yellow];
402[label="208.2.113.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
468[label="192.25.254.36;d;1pkt 1fpkt", shape=diamond, color=yellow];
793[label="161.77.19.161;d;1pkt 1fpkt", shape=hexagon, color=black];
1274[label="217.22.121.166;75pkt 75fpkt", shape=pentagon, color=darkviolet];
1427[label="217.22.126.226;318pkt 318fpkt", shape=pentagon, color=darkviolet];
stat26[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.22.126.226:53, *:53}[20.7071%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (41.4079%)&lt;BR/&gt; 6346: (11.3872%)&lt;BR/&gt; 6347: (5.38302%)&lt;BR/&gt; 1024: (1.13872%)&lt;BR/&gt; 12696: (0.414079%)&gt;];
}
88--195[label="1;1pkt 1fpkt"];
88--1274[label="1;1pkt 1fpkt"];
195--196[label="1;1pkt 1fpkt"];
195--205[label="0.25;1pkt 1fpkt"];
195--211[label="1;1pkt 1fpkt"];
195--231[label="1;1pkt 1fpkt"];
195--233[label="1;1pkt 1fpkt"];
195--243[label="1;1pkt 1fpkt"];
195--244[label="1;1pkt 1fpkt"];
195--251[label="1;1pkt 1fpkt"];
195--264[label="1;1pkt 1fpkt"];
195--312[label="1;1pkt 1fpkt"];
195--402[label="1;1pkt 1fpkt"];
195--468[label="1;1pkt 1fpkt"];
195--793[label="1;1pkt 1fpkt"];
195--1274[label="0.986301;72pkt 72fpkt"];
205--1274[label="0.25;1pkt 1fpkt"];
205--1427[label="0.25;1pkt 1fpkt"];
211--1274[label="1;1pkt 1fpkt"];
231--1274[label="1;1pkt 1fpkt"];
233--1274[label="1;1pkt 1fpkt"];
243--793[label="1;1pkt 1fpkt"];
243--1274[label="1;1pkt 1fpkt"];
244--1274[label="1;1pkt 1fpkt"];
251--1274[label="1;1pkt 1fpkt"];
264--1274[label="1;1pkt 1fpkt"];
312--1274[label="1;1pkt 1fpkt"];
402--1274[label="1;1pkt 1fpkt"];
468--1274[label="1;1pkt 1fpkt"];
793--1274[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="217.22.126.226" src_port="53"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="199.57.116.43"/>
      <from sec="989038800" usec="0"/>
      <to sec="989039628" usec="0"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636061,1.75765,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_28{
style=filled;
color=gray75;
212[label="155.59.168.24;d;2pkt 2fpkt", shape=diamond, color=yellow];
213[label="168.70.76.95;s;3pkt 3fpkt", shape=diamond, color=yellow];
1605[label="168.70.76.95;4pkt 4fpkt", shape=invtriangle, color=brown];
stat28[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.70.76.95:1319, 155.59.168.174:22}[25%]&lt;BR/&gt;{168.70.76.95:1364, 155.59.168.24:2116}[25%]&lt;BR/&gt;{168.70.76.95:1365, 155.59.168.24:2117}[25%]&lt;BR/&gt;{168.70.76.95:1366, 155.59.168.24:2119}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2117: (16.6667%)&lt;BR/&gt; 2116: (16.6667%)&lt;BR/&gt; 1365: (16.6667%)&lt;BR/&gt; 1364: (16.6667%)&lt;BR/&gt; 1319: (11.1111%)&gt;];
}
212--213[label="1;2pkt 2fpkt"];
212--1605[label="1;2pkt 2fpkt"];
213--1605[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="155.59.168.24" dst_port="2119" src_ip="168.70.76.95" src_port="1366"/>
      <filter dst_ip="155.59.168.24" dst_port="2117" src_ip="168.70.76.95" src_port="1365"/>
      <filter dst_ip="155.59.168.24" dst_port="2116" src_ip="168.70.76.95" src_port="1364"/>
      <filter dst_ip="155.59.168.174" dst_port="22" src_ip="168.70.76.95" src_port="1319"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,901,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_29{
style=filled;
color=gray75;
76[label="130.202.230.181;s;632pkt 632fpkt", shape=diamond, color=yellow];
119[label="199.72.199.113;d;24pkt 24fpkt", shape=diamond, color=yellow];
125[label="219.110.171.14;d;2pkt 2fpkt", shape=diamond, color=yellow];
222[label="217.157.124.161;d;594pkt 594fpkt", shape=diamond, color=yellow];
1310[label="130.202.230.181;645pkt 645fpkt", shape=pentagon, color=darkviolet];
stat29[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.202.230.181:*, 217.157.124.161:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (14.4439%)&lt;BR/&gt; 20: (9.56774%)&lt;BR/&gt; 6346: (4.58619%)&lt;BR/&gt; 53: (4.03268%)&lt;BR/&gt; 111: (2.8466%)&gt;];
}
76--119[label="0.958333;23pkt 23fpkt"];
76--125[label="1;2pkt 2fpkt"];
76--222[label="0.996633;592pkt 592fpkt"];
76--864[label="0.0174051;11pkt 11fpkt"];
76--870[label="0.00158228;1pkt 1fpkt"];
76--871[label="0.00791139;5pkt 5fpkt"];
76--872[label="0.0205696;13pkt 13fpkt"];
76--873[label="0.00316456;2pkt 2fpkt"];
76--882[label="0.0174051;11pkt 11fpkt"];
76--884[label="0.0158228;10pkt 10fpkt"];
76--885[label="0.00474684;3pkt 3fpkt"];
76--887[label="0.00158228;1pkt 1fpkt"];
76--888[label="0.00791139;5pkt 5fpkt"];
76--889[label="0.0205696;13pkt 13fpkt"];
76--890[label="0.00316456;2pkt 2fpkt"];
76--899[label="0.0174051;11pkt 11fpkt"];
76--901[label="0.0158228;10pkt 10fpkt"];
76--902[label="0.00474684;3pkt 3fpkt"];
76--903[label="0.00158228;1pkt 1fpkt"];
76--904[label="0.00791139;5pkt 5fpkt"];
76--905[label="0.0205696;13pkt 13fpkt"];
76--906[label="0.00316456;2pkt 2fpkt"];
76--1310[label="1;632pkt 632fpkt"];
119--1310[label="1;24pkt 24fpkt"];
125--1310[label="1;2pkt 2fpkt"];
222--864[label="0.0185185;11pkt 11fpkt"];
222--870[label="0.0016835;1pkt 1fpkt"];
222--871[label="0.00841751;5pkt 5fpkt"];
222--872[label="0.0218855;13pkt 13fpkt"];
222--873[label="0.003367;2pkt 2fpkt"];
222--882[label="0.0185185;11pkt 11fpkt"];
222--884[label="0.016835;10pkt 10fpkt"];
222--885[label="0.00505051;3pkt 3fpkt"];
222--887[label="0.0016835;1pkt 1fpkt"];
222--888[label="0.00841751;5pkt 5fpkt"];
222--889[label="0.0218855;13pkt 13fpkt"];
222--890[label="0.003367;2pkt 2fpkt"];
222--899[label="0.0185185;11pkt 11fpkt"];
222--901[label="0.016835;10pkt 10fpkt"];
222--902[label="0.00505051;3pkt 3fpkt"];
222--903[label="0.0016835;1pkt 1fpkt"];
222--904[label="0.00841751;5pkt 5fpkt"];
222--905[label="0.0218855;13pkt 13fpkt"];
222--906[label="0.003367;2pkt 2fpkt"];
222--1310[label="1;594pkt 594fpkt"];
</description>
    <slice>
      <filter dst_ip="217.157.124.161" dst_port="80" src_ip="130.202.230.181"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_30{
style=filled;
color=gray75;
135[label="130.202.211.93;d;7pkt 7fpkt", shape=diamond, color=yellow];
237[label="222.182.56.204;s;1pkt 1fpkt", shape=diamond, color=yellow];
239[label="192.104.111.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
247[label="153.160.226.96;s;1pkt 1fpkt", shape=diamond, color=yellow];
256[label="212.58.63.77;s;1pkt 1fpkt", shape=diamond, color=yellow];
262[label="192.34.206.95;s;1pkt 1fpkt", shape=diamond, color=yellow];
351[label="216.43.236.104;s;1pkt 1fpkt", shape=diamond, color=yellow];
821[label="216.43.236.104;s;1pkt 1fpkt", shape=hexagon, color=black];
stat30[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 130.202.211.93:6346}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 3524: (10.7143%)&lt;BR/&gt; 3403: (7.14286%)&lt;BR/&gt; 2683: (7.14286%)&lt;BR/&gt; 1967: (7.14286%)&gt;];
}
135--237[label="1;1pkt 1fpkt"];
135--239[label="1;1pkt 1fpkt"];
135--247[label="1;1pkt 1fpkt"];
135--256[label="1;1pkt 1fpkt"];
135--262[label="1;1pkt 1fpkt"];
135--351[label="1;1pkt 1fpkt"];
135--821[label="1;1pkt 1fpkt"];
351--821[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.211.93" dst_port="6346"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_32{
style=filled;
color=gray75;
136[label="130.202.211.93;s;8pkt 8fpkt", shape=diamond, color=yellow];
236[label="222.182.56.204;d;1pkt 1fpkt", shape=diamond, color=yellow];
238[label="192.104.111.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
246[label="153.160.226.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
255[label="212.58.63.77;d;1pkt 1fpkt", shape=diamond, color=yellow];
261[label="192.34.206.95;d;1pkt 1fpkt", shape=diamond, color=yellow];
267[label="193.83.123.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
350[label="216.43.236.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
812[label="130.202.211.93;s;8pkt 8fpkt", shape=hexagon, color=black];
820[label="216.43.236.104;d;1pkt 1fpkt", shape=hexagon, color=black];
stat32[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.202.211.93:6346, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 3524: (8.33333%)&lt;BR/&gt; 21036: (6.25%)&lt;BR/&gt; 3403: (6.25%)&lt;BR/&gt; 2683: (6.25%)&gt;];
}
136--236[label="1;1pkt 1fpkt"];
136--238[label="1;1pkt 1fpkt"];
136--246[label="1;1pkt 1fpkt"];
136--255[label="1;1pkt 1fpkt"];
136--261[label="1;1pkt 1fpkt"];
136--267[label="1;1pkt 1fpkt"];
136--350[label="1;1pkt 1fpkt"];
136--812[label="1;8pkt 8fpkt"];
136--820[label="1;1pkt 1fpkt"];
236--812[label="1;1pkt 1fpkt"];
238--812[label="1;1pkt 1fpkt"];
246--812[label="1;1pkt 1fpkt"];
255--812[label="1;1pkt 1fpkt"];
261--812[label="1;1pkt 1fpkt"];
267--812[label="1;1pkt 1fpkt"];
350--812[label="1;1pkt 1fpkt"];
350--820[label="1;1pkt 1fpkt"];
812--820[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="130.202.211.93" src_port="6346"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_33{
style=filled;
color=gray75;
51[label="157.96.244.101;d;69pkt 69fpkt", shape=diamond, color=yellow];
1037[label="217.255.131.45;19pkt 19fpkt", shape=pentagon, color=darkviolet];
1312[label="197.76.146.182;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1548[label="217.255.131.45;20pkt 20fpkt", shape=invtriangle, color=brown];
1815[label="217.255.131.45;20pkt 20fpkt", shape=invhouse, color=bisque];
stat33[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.255.131.45:*, 157.96.244.101:80}[28.9855%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.9466%)&lt;BR/&gt; 53: (2.29008%)&lt;BR/&gt; 13313: (1.52672%)&lt;BR/&gt; 11891: (1.52672%)&lt;BR/&gt; 9682: (1.52672%)&gt;];
}
51--258[label="1;9pkt 9fpkt"];
51--872[label="0.130435;9pkt 9fpkt"];
51--876[label="0.0144928;1pkt 1fpkt"];
51--884[label="0.202899;14pkt 14fpkt"];
51--889[label="0.130435;9pkt 9fpkt"];
51--893[label="0.0144928;1pkt 1fpkt"];
51--901[label="0.202899;14pkt 14fpkt"];
51--905[label="0.130435;9pkt 9fpkt"];
51--909[label="0.0144928;1pkt 1fpkt"];
51--1037[label="1;19pkt 19fpkt"];
51--1312[label="1;3pkt 3fpkt"];
51--1548[label="1;20pkt 20fpkt"];
51--1700[label="1;3pkt 3fpkt"];
51--1815[label="1;20pkt 20fpkt"];
1037--1548[label="1;19pkt 19fpkt"];
1037--1815[label="1;19pkt 19fpkt"];
1312--1700[label="1;3pkt 3fpkt"];
1548--1815[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="157.96.244.101" dst_port="80" src_ip="217.255.131.45"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,901,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_34{
style=filled;
color=gray75;
183[label="160.90.184.230;s;5pkt 5fpkt", shape=diamond, color=yellow];
184[label="221.194.73.129;d;1pkt 1fpkt", shape=diamond, color=yellow];
265[label="150.244.103.26;d;1pkt 1fpkt", shape=diamond, color=yellow];
339[label="25.169.252.163;d;1pkt 1fpkt", shape=diamond, color=yellow];
608[label="90.205.109.130;d;1pkt 1fpkt", shape=diamond, color=yellow];
1443[label="160.90.184.230;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1766[label="160.90.184.230;5pkt 5fpkt", shape=invtriangle, color=brown];
1946[label="160.90.184.230;5pkt 5fpkt", shape=invhouse, color=bisque];
stat34[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.90.184.230:2892, 220.83.172.21:80}[20%]&lt;BR/&gt;{160.90.184.230:2864, 150.244.103.26:6347}[20%]&lt;BR/&gt;{160.90.184.230:2885, 221.194.73.129:6346}[20%]&lt;BR/&gt;{160.90.184.230:2825, 90.205.109.130:6347}[20%]&lt;BR/&gt;{160.90.184.230:2881, 25.169.252.163:6346}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6347: (20.8333%)&lt;BR/&gt; 6346: (20.8333%)&lt;BR/&gt; 2885: (10.4167%)&lt;BR/&gt; 2881: (10.4167%)&lt;BR/&gt; 2864: (10.4167%)&gt;];
}
183--184[label="1;1pkt 1fpkt"];
183--265[label="1;1pkt 1fpkt"];
183--339[label="1;1pkt 1fpkt"];
183--608[label="1;1pkt 1fpkt"];
183--872[label="0.2;1pkt 1fpkt"];
183--889[label="0.2;1pkt 1fpkt"];
183--905[label="0.2;1pkt 1fpkt"];
183--1443[label="1;5pkt 5fpkt"];
183--1766[label="1;5pkt 5fpkt"];
183--1946[label="1;5pkt 5fpkt"];
184--1443[label="1;1pkt 1fpkt"];
184--1766[label="1;1pkt 1fpkt"];
184--1946[label="1;1pkt 1fpkt"];
265--1443[label="1;1pkt 1fpkt"];
265--1766[label="1;1pkt 1fpkt"];
265--1946[label="1;1pkt 1fpkt"];
339--1443[label="1;1pkt 1fpkt"];
339--1766[label="1;1pkt 1fpkt"];
339--1946[label="1;1pkt 1fpkt"];
608--1443[label="1;1pkt 1fpkt"];
608--1766[label="1;1pkt 1fpkt"];
608--1946[label="1;1pkt 1fpkt"];
1443--1766[label="1;5pkt 5fpkt"];
1443--1946[label="1;5pkt 5fpkt"];
1766--1946[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="25.169.252.163" dst_port="6346" src_ip="160.90.184.230" src_port="2881"/>
      <filter dst_ip="90.205.109.130" dst_port="6347" src_ip="160.90.184.230" src_port="2825"/>
      <filter dst_ip="221.194.73.129" dst_port="6346" src_ip="160.90.184.230" src_port="2885"/>
      <filter dst_ip="150.244.103.26" dst_port="6347" src_ip="160.90.184.230" src_port="2864"/>
      <filter dst_ip="220.83.172.21" dst_port="80" src_ip="160.90.184.230" src_port="2892"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.859655,1.69398,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_35{
style=filled;
color=gray75;
164[label="212.84.197.6;s;3pkt 3fpkt", shape=diamond, color=yellow];
278[label="157.117.20.203;d;2pkt 2fpkt", shape=diamond, color=yellow];
702[label="212.84.197.233;s;1pkt 1fpkt", shape=diamond, color=yellow];
768[label="157.117.20.203;d;1pkt 1fpkt", shape=hexagon, color=black];
1067[label="208.219.25.62;30pkt 30fpkt", shape=pentagon, color=darkviolet];
1451[label="212.84.197.233;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1770[label="212.84.197.233;5pkt 5fpkt", shape=invtriangle, color=brown];
stat35[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.219.25.62:*, 155.59.173.13:25}[36.8421%]&lt;BR/&gt;{208.219.25.62:113, 155.59.173.13:*}[36.8421%]&lt;BR/&gt;{*:53, *:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (20.6522%)&lt;BR/&gt; 113: (15.2174%)&lt;BR/&gt; 25: (15.2174%)&lt;BR/&gt; 1115: (7.6087%)&lt;BR/&gt; 55271: (2.17391%)&gt;];
}
164--278[label="0.5;1pkt 1fpkt"];
164--545[label="0.333333;1pkt 1fpkt"];
164--768[label="1;1pkt 1fpkt"];
164--876[label="0.333333;1pkt 1fpkt"];
164--893[label="0.333333;1pkt 1fpkt"];
164--909[label="0.333333;1pkt 1fpkt"];
164--932[label="1;3pkt 3fpkt"];
278--702[label="1;1pkt 1fpkt"];
278--768[label="1;1pkt 1fpkt"];
278--932[label="0.5;1pkt 1fpkt"];
278--1451[label="0.5;1pkt 1fpkt"];
278--1770[label="0.5;1pkt 1fpkt"];
702--1451[label="1;1pkt 1fpkt"];
702--1770[label="1;1pkt 1fpkt"];
768--932[label="1;1pkt 1fpkt"];
1067--1568[label="1;30pkt 30fpkt"];
1067--1830[label="1;30pkt 30fpkt"];
1451--1770[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_port="53"/>
      <filter dst_ip="155.59.173.13" src_ip="208.219.25.62" src_port="113"/>
      <filter dst_ip="155.59.173.13" dst_port="25" src_ip="208.219.25.62"/>
    </slice>
    <from sec="989038804" usec="0"/>
    <to sec="989039590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576123,1.72015,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_36{
style=filled;
color=gray75;
215[label="216.168.114.15;d;29pkt 29fpkt", shape=diamond, color=yellow];
282[label="221.161.246.183;s;3pkt 3fpkt", shape=diamond, color=yellow];
288[label="155.59.134.3;d;15pkt 15fpkt", shape=diamond, color=yellow];
316[label="220.83.248.26;s;22pkt 22fpkt", shape=diamond, color=yellow];
981[label="220.83.248.26;24pkt 24fpkt", shape=pentagon, color=darkviolet];
1316[label="221.161.246.183;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1518[label="220.83.248.26;23pkt 23fpkt", shape=invtriangle, color=brown];
stat36[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.83.248.26:80, 216.168.114.15:*}[47.8261%]&lt;BR/&gt;{*:80, 155.59.134.3:*}[32.6087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43429: (1.69492%)&lt;BR/&gt; 43428: (1.69492%)&lt;BR/&gt; 43427: (1.69492%)&lt;BR/&gt; 43426: (1.69492%)&gt;];
}
215--282[label="0.333333;1pkt 1fpkt"];
215--316[label="1;22pkt 22fpkt"];
215--568[label="0.0344828;1pkt 1fpkt"];
215--981[label="0.916667;22pkt 22fpkt"];
215--1168[label="0.0344828;1pkt 1fpkt"];
215--1316[label="0.5;1pkt 1fpkt"];
215--1518[label="0.956522;22pkt 22fpkt"];
215--1617[label="0.0344828;1pkt 1fpkt"];
215--1856[label="0.0344828;1pkt 1fpkt"];
282--288[label="0.666667;2pkt 2fpkt"];
282--1316[label="1;2pkt 2fpkt"];
288--1316[label="0.5;1pkt 1fpkt"];
316--981[label="1;22pkt 22fpkt"];
316--1518[label="1;22pkt 22fpkt"];
981--1518[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="155.59.134.3" src_port="80"/>
      <filter dst_ip="216.168.114.15" src_ip="220.83.248.26" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
285[label="155.59.16.211;d;28pkt 28fpkt", shape=diamond, color=yellow];
287[label="220.83.172.86;s;9pkt 9fpkt", shape=diamond, color=yellow];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.83.172.86:80, *:*}[25%]&lt;BR/&gt;{198.250.226.82:80, 155.59.16.211:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1180: (2.7027%)&lt;BR/&gt; 1155: (2.7027%)&lt;BR/&gt; 1154: (2.7027%)&lt;BR/&gt; 1823: (1.35135%)&gt;];
}
285--287[label="0.111111;1pkt 1fpkt"];
285--1403[label="0.0357143;1pkt 1fpkt"];
285--1746[label="0.0357143;1pkt 1fpkt"];
285--1933[label="0.0357143;1pkt 1fpkt"];
287--288[label="0.777778;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="220.83.172.86" src_port="80"/>
      <filter dst_ip="155.59.16.211" src_ip="198.250.226.82" src_port="80"/>
    </slice>
    <from sec="989038841" usec="0"/>
    <to sec="989039142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00365,1.69547,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_40{
style=filled;
color=gray75;
52[label="167.223.53.64;d;87pkt 87fpkt", shape=diamond, color=yellow];
295[label="25.79.9.97;s;45pkt 45fpkt", shape=diamond, color=yellow];
419[label="167.223.54.164;d;149pkt 149fpkt", shape=diamond, color=yellow];
421[label="167.223.53.109;d;15pkt 15fpkt", shape=diamond, color=yellow];
427[label="25.79.9.96;s;57pkt 57fpkt", shape=diamond, color=yellow];
483[label="199.148.92.88;s;34pkt 34fpkt", shape=diamond, color=yellow];
534[label="199.148.92.67;s;38pkt 38fpkt", shape=diamond, color=yellow];
555[label="25.79.9.98;s;51pkt 51fpkt", shape=diamond, color=yellow];
619[label="157.96.193.26;d;90pkt 90fpkt", shape=diamond, color=yellow];
792[label="199.148.92.67;s;33pkt 33fpkt", shape=hexagon, color=black];
824[label="199.148.166.224;s;81pkt 81fpkt", shape=hexagon, color=black];
942[label="222.13.123.10;11pkt 11fpkt", shape=pentagon, color=darkviolet];
950[label="223.74.21.14;35pkt 35fpkt", shape=pentagon, color=darkviolet];
1075[label="199.148.92.67;37pkt 37fpkt", shape=pentagon, color=darkviolet];
1095[label="223.74.106.78;51pkt 51fpkt", shape=pentagon, color=darkviolet];
1137[label="25.79.9.96;69pkt 69fpkt", shape=pentagon, color=darkviolet];
1140[label="25.79.9.97;44pkt 44fpkt", shape=pentagon, color=darkviolet];
1141[label="223.74.106.97;36pkt 36fpkt", shape=pentagon, color=darkviolet];
1142[label="25.79.9.98;50pkt 50fpkt", shape=pentagon, color=darkviolet];
1399[label="216.198.136.214;32pkt 32fpkt", shape=pentagon, color=darkviolet];
1462[label="131.89.68.241;36pkt 36fpkt", shape=pentagon, color=darkviolet];
1499[label="222.13.123.10;11pkt 11fpkt", shape=invtriangle, color=brown];
1502[label="223.74.21.14;35pkt 35fpkt", shape=invtriangle, color=brown];
1573[label="199.148.92.67;37pkt 37fpkt", shape=invtriangle, color=brown];
1606[label="25.79.9.98;50pkt 50fpkt", shape=invtriangle, color=brown];
1801[label="223.74.21.14;35pkt 35fpkt", shape=invhouse, color=bisque];
1827[label="213.18.41.59;44pkt 44fpkt", shape=invhouse, color=bisque];
1833[label="199.148.92.67;38pkt 38fpkt", shape=invhouse, color=bisque];
stat40[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:25}[35.6147%]&lt;BR/&gt;{*:113, *:*}[20.7858%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (20.6987%)&lt;BR/&gt; 113: (14.3125%)&lt;BR/&gt; 80: (9.01578%)&lt;BR/&gt; 6667: (3.34335%)&lt;BR/&gt; 53: (1.46506%)&gt;];
}
52--295[label="0.0222222;1pkt 1fpkt"];
52--366[label="0.0229885;2pkt 2fpkt"];
52--427[label="0.0701754;4pkt 4fpkt"];
52--483[label="0.0588235;2pkt 2fpkt"];
52--534[label="0.0263158;1pkt 1fpkt"];
52--554[label="0.0229885;2pkt 2fpkt"];
52--555[label="0.0392157;2pkt 2fpkt"];
52--560[label="0.045977;4pkt 4fpkt"];
52--792[label="0.030303;1pkt 1fpkt"];
52--824[label="0.0246914;2pkt 2fpkt"];
52--843[label="0.0229885;2pkt 2fpkt"];
52--875[label="0.0114943;1pkt 1fpkt"];
52--892[label="0.0114943;1pkt 1fpkt"];
52--908[label="0.0114943;1pkt 1fpkt"];
52--950[label="0.0571429;2pkt 2fpkt"];
52--1075[label="0.027027;1pkt 1fpkt"];
52--1095[label="0.294118;15pkt 15fpkt"];
52--1137[label="0.057971;4pkt 4fpkt"];
52--1140[label="0.0227273;1pkt 1fpkt"];
52--1141[label="0.416667;15pkt 15fpkt"];
52--1142[label="0.04;2pkt 2fpkt"];
52--1399[label="0.1875;6pkt 6fpkt"];
52--1502[label="0.0571429;2pkt 2fpkt"];
52--1573[label="0.027027;1pkt 1fpkt"];
52--1606[label="0.04;2pkt 2fpkt"];
52--1801[label="0.0571429;2pkt 2fpkt"];
52--1833[label="0.0263158;1pkt 1fpkt"];
295--324[label="0.0222222;1pkt 1fpkt"];
295--326[label="0.0444444;2pkt 2fpkt"];
295--413[label="0.0888889;4pkt 4fpkt"];
295--419[label="0.0222222;1pkt 1fpkt"];
295--484[label="0.04;1pkt 1fpkt"];
295--551[label="0.0540541;2pkt 2fpkt"];
295--623[label="0.0888889;4pkt 4fpkt"];
295--709[label="0.0222222;1pkt 1fpkt"];
295--731[label="0.0285714;1pkt 1fpkt"];
295--875[label="0.0888889;4pkt 4fpkt"];
295--892[label="0.0888889;4pkt 4fpkt"];
295--908[label="0.0888889;4pkt 4fpkt"];
295--1140[label="1;44pkt 44fpkt"];
419--427[label="0.0701754;4pkt 4fpkt"];
419--474[label="0.0327869;2pkt 2fpkt"];
419--483[label="0.0294118;1pkt 1fpkt"];
419--534[label="0.105263;4pkt 4fpkt"];
419--554[label="0.0449438;4pkt 4fpkt"];
419--559[label="0.111111;2pkt 2fpkt"];
419--560[label="0.0294118;4pkt 4fpkt"];
419--611[label="0.0266667;2pkt 2fpkt"];
419--618[label="0.111111;6pkt 6fpkt"];
419--621[label="0.846154;22pkt 22fpkt"];
419--678[label="0.0740741;2pkt 2fpkt"];
419--683[label="0.0377358;2pkt 2fpkt"];
419--726[label="0.0217391;1pkt 1fpkt"];
419--727[label="0.558824;19pkt 19fpkt"];
419--792[label="0.0606061;2pkt 2fpkt"];
419--823[label="0.826087;19pkt 19fpkt"];
419--824[label="0.0493827;4pkt 4fpkt"];
419--843[label="0.0631579;6pkt 6fpkt"];
419--875[label="0.0671141;10pkt 10fpkt"];
419--892[label="0.0671141;10pkt 10fpkt"];
419--908[label="0.0671141;10pkt 10fpkt"];
419--1057[label="0.625;25pkt 25fpkt"];
419--1075[label="0.108108;4pkt 4fpkt"];
419--1137[label="0.057971;4pkt 4fpkt"];
419--1140[label="0.0227273;1pkt 1fpkt"];
419--1462[label="0.527778;19pkt 19fpkt"];
419--1573[label="0.108108;4pkt 4fpkt"];
419--1827[label="0.545455;24pkt 24fpkt"];
419--1833[label="0.105263;4pkt 4fpkt"];
421--501[label="0.0666667;1pkt 1fpkt"];
421--554[label="0.266667;4pkt 4fpkt"];
421--555[label="0.0666667;1pkt 1fpkt"];
421--618[label="0.133333;2pkt 2fpkt"];
421--673[label="0.133333;2pkt 2fpkt"];
421--717[label="0.133333;2pkt 2fpkt"];
421--824[label="0.266667;4pkt 4fpkt"];
421--1142[label="0.0666667;1pkt 1fpkt"];
421--1366[label="0.133333;2pkt 2fpkt"];
421--1606[label="0.0666667;1pkt 1fpkt"];
427--551[label="0.0540541;2pkt 2fpkt"];
427--623[label="0.0175439;1pkt 1fpkt"];
427--625[label="0.0350877;2pkt 2fpkt"];
427--660[label="0.0769231;2pkt 2fpkt"];
427--875[label="0.105263;6pkt 6fpkt"];
427--892[label="0.105263;6pkt 6fpkt"];
427--908[label="0.105263;6pkt 6fpkt"];
427--1137[label="0.982456;56pkt 56fpkt"];
483--540[label="0.0294118;1pkt 1fpkt"];
483--623[label="0.0294118;1pkt 1fpkt"];
483--707[label="0.0294118;1pkt 1fpkt"];
483--816[label="0.0294118;1pkt 1fpkt"];
483--875[label="0.117647;4pkt 4fpkt"];
483--892[label="0.117647;4pkt 4fpkt"];
483--908[label="0.117647;4pkt 4fpkt"];
534--540[label="0.0263158;1pkt 1fpkt"];
534--612[label="0.0263158;1pkt 1fpkt"];
534--625[label="0.0526316;2pkt 2fpkt"];
534--712[label="0.0714286;1pkt 1fpkt"];
534--729[label="0.0263158;1pkt 1fpkt"];
534--792[label="1;33pkt 33fpkt"];
534--816[label="0.0263158;1pkt 1fpkt"];
534--875[label="0.184211;7pkt 7fpkt"];
534--892[label="0.184211;7pkt 7fpkt"];
534--908[label="0.184211;7pkt 7fpkt"];
534--1075[label="1;37pkt 37fpkt"];
534--1573[label="1;37pkt 37fpkt"];
534--1833[label="1;38pkt 38fpkt"];
555--619[label="0.0392157;2pkt 2fpkt"];
555--625[label="0.0392157;2pkt 2fpkt"];
555--712[label="0.142857;2pkt 2fpkt"];
555--725[label="0.04;1pkt 1fpkt"];
555--816[label="0.117647;6pkt 6fpkt"];
555--875[label="0.156863;8pkt 8fpkt"];
555--892[label="0.156863;8pkt 8fpkt"];
555--908[label="0.156863;8pkt 8fpkt"];
555--1142[label="1;50pkt 50fpkt"];
555--1606[label="1;50pkt 50fpkt"];
619--875[label="0.0333333;3pkt 3fpkt"];
619--892[label="0.0333333;3pkt 3fpkt"];
619--908[label="0.0333333;3pkt 3fpkt"];
619--942[label="0.181818;2pkt 2fpkt"];
619--1142[label="0.02;1pkt 1fpkt"];
619--1499[label="0.181818;2pkt 2fpkt"];
619--1606[label="0.02;1pkt 1fpkt"];
792--816[label="0.030303;1pkt 1fpkt"];
792--875[label="0.151515;5pkt 5fpkt"];
792--892[label="0.151515;5pkt 5fpkt"];
792--908[label="0.151515;5pkt 5fpkt"];
792--1075[label="0.969697;32pkt 32fpkt"];
792--1573[label="0.969697;32pkt 32fpkt"];
792--1833[label="1;33pkt 33fpkt"];
824--875[label="0.185185;15pkt 15fpkt"];
824--892[label="0.185185;15pkt 15fpkt"];
824--908[label="0.185185;15pkt 15fpkt"];
942--1499[label="1;11pkt 11fpkt"];
950--1502[label="1;35pkt 35fpkt"];
950--1801[label="1;35pkt 35fpkt"];
1075--1573[label="1;37pkt 37fpkt"];
1075--1833[label="1;37pkt 37fpkt"];
1142--1606[label="1;50pkt 50fpkt"];
1502--1801[label="1;35pkt 35fpkt"];
1573--1833[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter src_port="113"/>
      <filter dst_port="25"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_41{
style=filled;
color=gray75;
62[label="193.14.98.195;s;1pkt 1fpkt", shape=diamond, color=yellow];
300[label="130.202.151.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat41[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.14.98.195:20, 130.202.151.98:34921}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34921: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
62--300[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.151.98" dst_port="34921" src_ip="193.14.98.195" src_port="20"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_42{
style=filled;
color=gray75;
207[label="155.59.168.27;s;7pkt 7fpkt", shape=diamond, color=yellow];
311[label="70.91.214.42;d;6pkt 6fpkt", shape=diamond, color=yellow];
stat42[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.59.168.27:*, 70.91.214.42:6688}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6688: (46.1538%)&lt;BR/&gt; 1073: (7.69231%)&lt;BR/&gt; 1072: (7.69231%)&lt;BR/&gt; 1071: (7.69231%)&lt;BR/&gt; 1068: (7.69231%)&gt;];
}
207--311[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="70.91.214.42" dst_port="6688" src_ip="155.59.168.27"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_43{
style=filled;
color=gray75;
126[label="130.202.208.90;s;45pkt 45fpkt", shape=diamond, color=yellow];
318[label="70.138.156.34;d;1pkt 1fpkt", shape=diamond, color=yellow];
323[label="24.16.22.167;d;1pkt 1fpkt", shape=diamond, color=yellow];
444[label="174.189.111.8;d;3pkt 3fpkt", shape=diamond, color=yellow];
573[label="199.57.77.177;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat43[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.202.208.90:*, 70.148.110.56:6346}[28.8889%]&lt;BR/&gt;{130.202.208.90:*, 156.110.209.23:6346}[24.4444%]&lt;BR/&gt;{130.202.208.90:*, 70.93.101.61:6346}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (48.0769%)&lt;BR/&gt; 137: (3.84615%)&lt;BR/&gt; 2510: (1.92308%)&lt;BR/&gt; 2509: (1.92308%)&lt;BR/&gt; 2496: (1.92308%)&gt;];
}
126--318[label="1;1pkt 1fpkt"];
126--323[label="1;1pkt 1fpkt"];
126--444[label="1;3pkt 3fpkt"];
126--573[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="70.148.110.56" dst_port="6346" src_ip="130.202.208.90"/>
      <filter dst_ip="156.110.209.23" dst_port="6346" src_ip="130.202.208.90"/>
      <filter dst_ip="70.93.101.61" dst_port="6346" src_ip="130.202.208.90"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
182[label="160.90.184.230;d;28pkt 28fpkt", shape=diamond, color=yellow];
185[label="221.194.73.129;s;1pkt 1fpkt", shape=diamond, color=yellow];
334[label="90.205.109.130;s;1pkt 1fpkt", shape=diamond, color=yellow];
408[label="25.169.252.163;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 160.90.184.230:6346}[78.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (41.9355%)&lt;BR/&gt; 6347: (4.83871%)&lt;BR/&gt; 2885: (3.22581%)&lt;BR/&gt; 2881: (3.22581%)&lt;BR/&gt; 2825: (3.22581%)&gt;];
}
182--185[label="1;1pkt 1fpkt"];
182--266[label="1;1pkt 1fpkt"];
182--334[label="1;1pkt 1fpkt"];
182--408[label="1;1pkt 1fpkt"];
182--561[label="0.0357143;1pkt 1fpkt"];
182--794[label="1;1pkt 1fpkt"];
182--799[label="0.0357143;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.90.184.230" dst_port="6346"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_45{
style=filled;
color=gray75;
78[label="70.54.60.115;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat45[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.59.208.17:26119, 70.54.60.115:6346}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26119: (50%)&lt;BR/&gt; 6346: (50%)&gt;];
}
78--187[label="1;1pkt 1fpkt"];
78--959[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="70.54.60.115" dst_port="6346" src_ip="155.59.208.17" src_port="26119"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="216.103.38.211"/>
      <from sec="989038800" usec="0"/>
      <to sec="989039628" usec="0"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
163[label="217.22.121.224;s;4pkt 4fpkt", shape=diamond, color=yellow];
362[label="219.154.131.178;d;4pkt 4fpkt", shape=diamond, color=yellow];
1418[label="217.22.121.224;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1753[label="217.22.121.224;3pkt 3fpkt", shape=invtriangle, color=brown];
1939[label="217.22.121.224;3pkt 3fpkt", shape=invhouse, color=bisque];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.22.121.224:80, 219.154.131.178:33371}[25%]&lt;BR/&gt;{217.22.121.224:80, 219.154.131.178:33372}[25%]&lt;BR/&gt;{217.22.121.224:80, 219.154.131.178:33373}[25%]&lt;BR/&gt;{217.22.121.224:80, 219.154.131.178:33374}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33374: (14.7059%)&lt;BR/&gt; 33373: (14.7059%)&lt;BR/&gt; 33372: (14.7059%)&lt;BR/&gt; 33371: (5.88235%)&gt;];
}
163--362[label="1;4pkt 4fpkt"];
163--1418[label="1;3pkt 3fpkt"];
163--1753[label="1;3pkt 3fpkt"];
163--1939[label="1;3pkt 3fpkt"];
362--1418[label="1;3pkt 3fpkt"];
362--1753[label="1;3pkt 3fpkt"];
362--1939[label="1;3pkt 3fpkt"];
1418--1753[label="1;3pkt 3fpkt"];
1418--1939[label="1;3pkt 3fpkt"];
1753--1939[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="219.154.131.178" dst_port="33374" src_ip="217.22.121.224" src_port="80"/>
      <filter dst_ip="219.154.131.178" dst_port="33373" src_ip="217.22.121.224" src_port="80"/>
      <filter dst_ip="219.154.131.178" dst_port="33372" src_ip="217.22.121.224" src_port="80"/>
      <filter dst_ip="219.154.131.178" dst_port="33371" src_ip="217.22.121.224" src_port="80"/>
    </slice>
    <from sec="989038803" usec="0"/>
    <to sec="989038950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
202[label="157.96.193.153;d;316pkt 316fpkt", shape=diamond, color=yellow];
365[label="200.0.101.225;s;180pkt 180fpkt", shape=diamond, color=yellow];
420[label="160.90.214.141;d;162pkt 162fpkt", shape=diamond, color=yellow];
425[label="160.90.244.176;d;76pkt 76fpkt", shape=diamond, color=yellow];
497[label="200.0.101.226;s;136pkt 136fpkt", shape=diamond, color=yellow];
567[label="200.0.101.227;s;129pkt 129fpkt", shape=diamond, color=yellow];
674[label="200.0.101.224;s;123pkt 123fpkt", shape=diamond, color=yellow];
708[label="216.162.195.152;d;85pkt 85fpkt", shape=diamond, color=yellow];
970[label="70.142.228.21;16pkt 16fpkt", shape=pentagon, color=darkviolet];
986[label="197.76.146.29;6pkt 6fpkt", shape=pentagon, color=darkviolet];
1072[label="213.19.79.64;14pkt 14fpkt", shape=pentagon, color=darkviolet];
1115[label="213.19.79.88;29pkt 29fpkt", shape=pentagon, color=darkviolet];
1268[label="198.97.211.163;15pkt 15fpkt", shape=pentagon, color=darkviolet];
1407[label="198.93.95.219;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1417[label="200.0.101.224;130pkt 130fpkt", shape=pentagon, color=darkviolet];
1425[label="200.0.101.226;147pkt 147fpkt", shape=pentagon, color=darkviolet];
1521[label="197.76.146.29;7pkt 7fpkt", shape=invtriangle, color=brown];
1594[label="213.19.79.88;28pkt 28fpkt", shape=invtriangle, color=brown];
1725[label="198.75.4.203;26pkt 26fpkt", shape=invtriangle, color=brown];
1749[label="198.93.95.219;2pkt 2fpkt", shape=invtriangle, color=brown];
1758[label="200.0.101.226;147pkt 147fpkt", shape=invtriangle, color=brown];
1846[label="213.19.79.88;28pkt 28fpkt", shape=invhouse, color=bisque];
1920[label="198.75.4.203;26pkt 26fpkt", shape=invhouse, color=bisque];
1936[label="198.93.95.219;2pkt 2fpkt", shape=invhouse, color=bisque];
1941[label="200.0.101.226;148pkt 148fpkt", shape=invhouse, color=bisque];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 157.96.193.153:80}[41.0064%]&lt;BR/&gt;{*:*, 160.90.214.141:80}[20.0214%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2929%)&lt;BR/&gt; 8080: (0.707071%)&lt;BR/&gt; 28982: (0.151515%)&lt;BR/&gt; 31944: (0.126263%)&lt;BR/&gt; 31772: (0.126263%)&gt;];
}
202--365[label="0.155556;28pkt 28fpkt"];
202--497[label="0.220588;30pkt 30fpkt"];
202--567[label="0.255814;33pkt 33fpkt"];
202--674[label="0.235772;29pkt 29fpkt"];
202--872[label="0.056962;18pkt 18fpkt"];
202--884[label="0.107595;34pkt 34fpkt"];
202--889[label="0.056962;18pkt 18fpkt"];
202--901[label="0.107595;34pkt 34fpkt"];
202--905[label="0.056962;18pkt 18fpkt"];
202--914[label="0.0666667;1pkt 1fpkt"];
202--970[label="1;16pkt 16fpkt"];
202--986[label="1;6pkt 6fpkt"];
202--1020[label="0.0588235;2pkt 2fpkt"];
202--1072[label="0.0714286;1pkt 1fpkt"];
202--1081[label="0.0454545;1pkt 1fpkt"];
202--1102[label="0.181818;4pkt 4fpkt"];
202--1115[label="0.0344828;1pkt 1fpkt"];
202--1126[label="0.125;2pkt 2fpkt"];
202--1268[label="0.333333;5pkt 5fpkt"];
202--1349[label="0.0232558;1pkt 1fpkt"];
202--1407[label="1;2pkt 2fpkt"];
202--1417[label="0.223077;29pkt 29fpkt"];
202--1425[label="0.204082;30pkt 30fpkt"];
202--1512[label="1;16pkt 16fpkt"];
202--1521[label="1;7pkt 7fpkt"];
202--1594[label="0.0357143;1pkt 1fpkt"];
202--1719[label="0.0227273;1pkt 1fpkt"];
202--1749[label="1;2pkt 2fpkt"];
202--1758[label="0.204082;30pkt 30fpkt"];
202--1846[label="0.0357143;1pkt 1fpkt"];
202--1936[label="1;2pkt 2fpkt"];
202--1941[label="0.202703;30pkt 30fpkt"];
365--420[label="0.222222;36pkt 36fpkt"];
365--425[label="0.381579;29pkt 29fpkt"];
365--708[label="0.2;17pkt 17fpkt"];
365--872[label="0.0611111;11pkt 11fpkt"];
365--884[label="0.0611111;11pkt 11fpkt"];
365--889[label="0.0611111;11pkt 11fpkt"];
365--901[label="0.0611111;11pkt 11fpkt"];
365--905[label="0.0611111;11pkt 11fpkt"];
420--497[label="0.272059;37pkt 37fpkt"];
420--567[label="0.27907;36pkt 36fpkt"];
420--674[label="0.292683;36pkt 36fpkt"];
420--872[label="0.0617284;10pkt 10fpkt"];
420--884[label="0.0740741;12pkt 12fpkt"];
420--889[label="0.0617284;10pkt 10fpkt"];
420--901[label="0.0740741;12pkt 12fpkt"];
420--905[label="0.0617284;10pkt 10fpkt"];
420--1287[label="0.0294118;1pkt 1fpkt"];
420--1332[label="0.0909091;1pkt 1fpkt"];
420--1340[label="0.04;1pkt 1fpkt"];
420--1349[label="0.0465116;2pkt 2fpkt"];
420--1417[label="0.276923;36pkt 36fpkt"];
420--1425[label="0.251701;37pkt 37fpkt"];
420--1719[label="0.0454545;2pkt 2fpkt"];
420--1758[label="0.251701;37pkt 37fpkt"];
420--1941[label="0.25;37pkt 37fpkt"];
425--497[label="0.157895;12pkt 12fpkt"];
425--567[label="0.263158;20pkt 20fpkt"];
425--674[label="0.0657895;5pkt 5fpkt"];
425--872[label="0.144737;11pkt 11fpkt"];
425--884[label="0.210526;16pkt 16fpkt"];
425--889[label="0.144737;11pkt 11fpkt"];
425--901[label="0.210526;16pkt 16fpkt"];
425--905[label="0.144737;11pkt 11fpkt"];
425--1115[label="0.0344828;1pkt 1fpkt"];
425--1392[label="1;7pkt 7fpkt"];
425--1417[label="0.0657895;5pkt 5fpkt"];
425--1425[label="0.157895;12pkt 12fpkt"];
425--1594[label="0.0357143;1pkt 1fpkt"];
425--1758[label="0.157895;12pkt 12fpkt"];
425--1846[label="0.0357143;1pkt 1fpkt"];
425--1941[label="0.157895;12pkt 12fpkt"];
497--708[label="0.0823529;7pkt 7fpkt"];
497--872[label="0.0588235;8pkt 8fpkt"];
497--884[label="0.0588235;8pkt 8fpkt"];
497--889[label="0.0588235;8pkt 8fpkt"];
497--901[label="0.0588235;8pkt 8fpkt"];
497--905[label="0.0588235;8pkt 8fpkt"];
497--1425[label="0.992647;135pkt 135fpkt"];
497--1758[label="0.992647;135pkt 135fpkt"];
497--1941[label="1;136pkt 136fpkt"];
567--872[label="0.0542636;7pkt 7fpkt"];
567--884[label="0.0465116;6pkt 6fpkt"];
567--889[label="0.0542636;7pkt 7fpkt"];
567--901[label="0.0465116;6pkt 6fpkt"];
567--905[label="0.0542636;7pkt 7fpkt"];
674--708[label="0.0235294;2pkt 2fpkt"];
674--872[label="0.0569106;7pkt 7fpkt"];
674--884[label="0.0487805;6pkt 6fpkt"];
674--889[label="0.0569106;7pkt 7fpkt"];
674--901[label="0.0487805;6pkt 6fpkt"];
674--905[label="0.0569106;7pkt 7fpkt"];
674--1417[label="0.99187;122pkt 122fpkt"];
708--872[label="0.0470588;4pkt 4fpkt"];
708--884[label="0.0117647;1pkt 1fpkt"];
708--889[label="0.0470588;4pkt 4fpkt"];
708--901[label="0.0117647;1pkt 1fpkt"];
708--905[label="0.0470588;4pkt 4fpkt"];
708--1102[label="0.136364;3pkt 3fpkt"];
708--1115[label="0.0689655;2pkt 2fpkt"];
708--1150[label="0.305882;26pkt 26fpkt"];
708--1261[label="0.0434783;1pkt 1fpkt"];
708--1349[label="0.0232558;1pkt 1fpkt"];
708--1362[label="0.37037;10pkt 10fpkt"];
708--1417[label="0.0235294;2pkt 2fpkt"];
708--1425[label="0.0823529;7pkt 7fpkt"];
708--1594[label="0.0714286;2pkt 2fpkt"];
708--1719[label="0.0227273;1pkt 1fpkt"];
708--1725[label="0.384615;10pkt 10fpkt"];
708--1758[label="0.0823529;7pkt 7fpkt"];
708--1846[label="0.0714286;2pkt 2fpkt"];
708--1920[label="0.384615;10pkt 10fpkt"];
708--1941[label="0.0823529;7pkt 7fpkt"];
970--1512[label="1;16pkt 16fpkt"];
986--1521[label="1;6pkt 6fpkt"];
1115--1594[label="1;28pkt 28fpkt"];
1115--1846[label="1;28pkt 28fpkt"];
1407--1749[label="1;2pkt 2fpkt"];
1407--1936[label="1;2pkt 2fpkt"];
1425--1758[label="1;147pkt 147fpkt"];
1425--1941[label="1;147pkt 147fpkt"];
1594--1846[label="1;28pkt 28fpkt"];
1725--1920[label="1;26pkt 26fpkt"];
1749--1936[label="1;2pkt 2fpkt"];
1758--1941[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_ip="157.96.193.153" dst_port="80"/>
      <filter dst_ip="160.90.214.141" dst_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="25.192.96.172"/>
      <from sec="989038973" usec="0"/>
      <to sec="989039088" usec="0"/>
    </slice>
    <from sec="989038973" usec="0"/>
    <to sec="989039088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576123,1.72015,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
86[label="160.90.140.184;s;2pkt 2fpkt", shape=diamond, color=yellow];
389[label="198.21.205.184;d;1pkt 1fpkt", shape=diamond, color=yellow];
1318[label="160.90.140.184;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1703[label="160.90.140.184;2pkt 2fpkt", shape=invtriangle, color=brown];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.90.140.184:5000, 198.21.205.184:18638}[50%]&lt;BR/&gt;{160.90.140.184:5002, 200.24.249.190:5002}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5002: (42.8571%)&lt;BR/&gt; 18638: (28.5714%)&lt;BR/&gt; 5000: (28.5714%)&gt;];
}
86--389[label="1;1pkt 1fpkt"];
86--1318[label="1;2pkt 2fpkt"];
86--1703[label="1;2pkt 2fpkt"];
389--1318[label="1;1pkt 1fpkt"];
389--1703[label="1;1pkt 1fpkt"];
1318--1703[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.24.249.190" dst_port="5002" src_ip="160.90.140.184" src_port="5002"/>
      <filter dst_ip="198.21.205.184" dst_port="18638" src_ip="160.90.140.184" src_port="5000"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,053,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
352[label="130.202.211.13;d;630pkt 630fpkt", shape=diamond, color=yellow];
822[label="130.202.211.13;d;493pkt 493fpkt", shape=hexagon, color=black];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.222.77.243:80, 130.202.211.13:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3570: (0.0890472%)&lt;BR/&gt; 3569: (0.0890472%)&lt;BR/&gt; 3568: (0.0890472%)&lt;BR/&gt; 3567: (0.0890472%)&gt;];
}
352--353[label="1;630pkt 630fpkt"];
352--822[label="1;493pkt 493fpkt"];
352--864[label="0.0571429;36pkt 36fpkt"];
352--882[label="0.0571429;36pkt 36fpkt"];
352--899[label="0.0571429;36pkt 36fpkt"];
822--864[label="0.0730223;36pkt 36fpkt"];
822--882[label="0.0730223;36pkt 36fpkt"];
822--899[label="0.0730223;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.211.13" src_ip="200.222.77.243" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="217.22.126.235"/>
      <from sec="989038800" usec="0"/>
      <to sec="989039628" usec="0"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="208.2.113.172"/>
      <from sec="989038800" usec="0"/>
      <to sec="989039538" usec="0"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
228[label="157.96.210.91;d;7pkt 7fpkt", shape=diamond, color=yellow];
404[label="26.226.34.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 157.96.210.91:0}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (62.5%)&lt;BR/&gt; 6700: (12.5%)&lt;BR/&gt; 1260: (12.5%)&lt;BR/&gt; 8888: (6.25%)&lt;BR/&gt; 2262: (6.25%)&gt;];
}
228--404[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="157.96.210.91"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="200.106.4.64"/>
      <from sec="989038800" usec="0"/>
      <to sec="989039313" usec="0"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
331[label="155.59.129.227;d;1pkt 1fpkt", shape=diamond, color=yellow];
407[label="24.46.146.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.46.146.74:1214, 155.59.129.227:1044}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 1044: (50%)&gt;];
}
331--407[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.59.129.227" dst_port="1044" src_ip="24.46.146.74" src_port="1214"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00365,1.69547,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
67[label="155.59.208.20;d;68pkt 68fpkt", shape=diamond, color=yellow];
355[label="70.14.247.58;s;1pkt 1fpkt", shape=diamond, color=yellow];
410[label="192.100.30.133;s;1pkt 1fpkt", shape=diamond, color=yellow];
521[label="157.96.201.235;d;26pkt 26fpkt", shape=diamond, color=yellow];
525[label="193.176.235.73;s;1pkt 1fpkt", shape=diamond, color=yellow];
651[label="160.90.195.20;d;41pkt 41fpkt", shape=diamond, color=yellow];
685[label="130.202.208.166;d;115pkt 115fpkt", shape=diamond, color=yellow];
795[label="70.14.247.58;s;1pkt 1fpkt", shape=hexagon, color=black];
984[label="25.128.54.28;9pkt 9fpkt", shape=pentagon, color=darkviolet];
1064[label="70.14.247.58;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1253[label="220.83.172.159;32pkt 32fpkt", shape=pentagon, color=darkviolet];
1520[label="25.128.54.28;10pkt 10fpkt", shape=invtriangle, color=brown];
1637[label="192.100.30.133;1pkt 1fpkt", shape=invtriangle, color=brown];
1670[label="220.83.172.159;32pkt 32fpkt", shape=invtriangle, color=brown];
1826[label="70.14.247.58;1pkt 1fpkt", shape=invhouse, color=bisque];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 130.202.208.166:*}[44.2308%]&lt;BR/&gt;{*:*, 155.59.208.20:*}[26.5385%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.4412%)&lt;BR/&gt; 6346: (5%)&lt;BR/&gt; 443: (2.79412%)&lt;BR/&gt; 0: (2.05882%)&lt;BR/&gt; 46893: (0.735294%)&gt;];
}
67--109[label="1;2pkt 2fpkt"];
67--355[label="1;1pkt 1fpkt"];
67--410[label="1;1pkt 1fpkt"];
67--525[label="1;1pkt 1fpkt"];
67--547[label="1;1pkt 1fpkt"];
67--795[label="1;1pkt 1fpkt"];
67--938[label="1;1pkt 1fpkt"];
67--984[label="0.111111;1pkt 1fpkt"];
67--1064[label="1;1pkt 1fpkt"];
67--1217[label="1;1pkt 1fpkt"];
67--1253[label="0.1875;6pkt 6fpkt"];
67--1520[label="0.1;1pkt 1fpkt"];
67--1637[label="1;1pkt 1fpkt"];
67--1644[label="1;1pkt 1fpkt"];
67--1670[label="0.1875;6pkt 6fpkt"];
67--1826[label="1;1pkt 1fpkt"];
67--1872[label="1;1pkt 1fpkt"];
355--795[label="1;1pkt 1fpkt"];
355--1064[label="1;1pkt 1fpkt"];
355--1826[label="1;1pkt 1fpkt"];
410--1637[label="1;1pkt 1fpkt"];
521--984[label="0.444444;4pkt 4fpkt"];
521--1520[label="0.4;4pkt 4fpkt"];
651--652[label="0.6;3pkt 3fpkt"];
651--984[label="0.222222;2pkt 2fpkt"];
651--1242[label="0.25;2pkt 2fpkt"];
651--1520[label="0.3;3pkt 3fpkt"];
651--1663[label="0.333333;3pkt 3fpkt"];
651--1881[label="0.25;2pkt 2fpkt"];
685--864[label="0.0173913;2pkt 2fpkt"];
685--882[label="0.0173913;2pkt 2fpkt"];
685--899[label="0.0173913;2pkt 2fpkt"];
685--1210[label="0.0178571;1pkt 1fpkt"];
685--1253[label="0.5625;18pkt 18fpkt"];
685--1670[label="0.5625;18pkt 18fpkt"];
795--1064[label="1;1pkt 1fpkt"];
795--1826[label="1;1pkt 1fpkt"];
984--1520[label="1;9pkt 9fpkt"];
1064--1826[label="1;1pkt 1fpkt"];
1253--1670[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="155.59.208.20"/>
      <filter dst_ip="130.202.208.166" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00365,1.69547,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
219[label="130.202.208.90;d;29pkt 29fpkt", shape=diamond, color=yellow];
225[label="24.16.22.167;s;1pkt 1fpkt", shape=diamond, color=yellow];
319[label="70.138.156.34;s;1pkt 1fpkt", shape=diamond, color=yellow];
415[label="70.238.44.222;s;1pkt 1fpkt", shape=diamond, color=yellow];
445[label="174.189.111.8;s;2pkt 2fpkt", shape=diamond, color=yellow];
574[label="199.57.77.177;s;2pkt 2fpkt", shape=diamond, color=yellow];
833[label="174.189.111.8;s;2pkt 2fpkt", shape=hexagon, color=black];
937[label="174.189.111.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1278[label="24.16.22.167;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1495[label="174.189.111.8;1pkt 1fpkt", shape=invtriangle, color=brown];
1685[label="24.16.22.167;1pkt 1fpkt", shape=invtriangle, color=brown];
1797[label="174.189.111.8;1pkt 1fpkt", shape=invhouse, color=bisque];
1895[label="24.16.22.167;1pkt 1fpkt", shape=invhouse, color=bisque];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.148.110.56:6346, 130.202.208.90:*}[34.4828%]&lt;BR/&gt;{70.93.101.61:6346, 130.202.208.90:*}[24.1379%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (47.7273%)&lt;BR/&gt; 2510: (6.81818%)&lt;BR/&gt; 2432: (5.68182%)&lt;BR/&gt; 2509: (3.40909%)&lt;BR/&gt; 2496: (2.27273%)&gt;];
}
219--225[label="1;1pkt 1fpkt"];
219--319[label="1;1pkt 1fpkt"];
219--415[label="1;1pkt 1fpkt"];
219--445[label="1;2pkt 2fpkt"];
219--574[label="1;2pkt 2fpkt"];
219--833[label="1;2pkt 2fpkt"];
219--937[label="1;1pkt 1fpkt"];
219--1278[label="1;1pkt 1fpkt"];
219--1495[label="1;1pkt 1fpkt"];
219--1685[label="1;1pkt 1fpkt"];
219--1797[label="1;1pkt 1fpkt"];
219--1895[label="1;1pkt 1fpkt"];
225--1278[label="1;1pkt 1fpkt"];
225--1685[label="1;1pkt 1fpkt"];
225--1895[label="1;1pkt 1fpkt"];
445--833[label="1;2pkt 2fpkt"];
445--937[label="1;1pkt 1fpkt"];
445--1495[label="1;1pkt 1fpkt"];
445--1797[label="1;1pkt 1fpkt"];
833--937[label="1;1pkt 1fpkt"];
833--1495[label="1;1pkt 1fpkt"];
833--1797[label="1;1pkt 1fpkt"];
937--1495[label="1;1pkt 1fpkt"];
937--1797[label="1;1pkt 1fpkt"];
1278--1685[label="1;1pkt 1fpkt"];
1278--1895[label="1;1pkt 1fpkt"];
1495--1797[label="1;1pkt 1fpkt"];
1685--1895[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.208.90" src_ip="70.148.110.56" src_port="6346"/>
      <filter dst_ip="130.202.208.90" src_ip="70.93.101.61" src_port="6346"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
260[label="130.202.208.176;s;256pkt 256fpkt", shape=diamond, color=yellow];
433[label="85.130.30.106;d;80pkt 80fpkt", shape=diamond, color=yellow];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.202.208.176:*, 85.130.30.106:80}[65.625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7024%)&lt;BR/&gt; 2110: (0.297619%)&lt;BR/&gt; 2108: (0.297619%)&lt;BR/&gt; 2107: (0.297619%)&lt;BR/&gt; 2104: (0.297619%)&gt;];
}
260--433[label="1;80pkt 80fpkt"];
260--679[label="0.00925926;1pkt 1fpkt"];
260--872[label="0.0078125;2pkt 2fpkt"];
260--884[label="0.078125;20pkt 20fpkt"];
260--889[label="0.0078125;2pkt 2fpkt"];
260--901[label="0.078125;20pkt 20fpkt"];
260--905[label="0.0078125;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="85.130.30.106" dst_port="80" src_ip="130.202.208.176"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
175[label="155.59.167.40;d;5pkt 5fpkt", shape=diamond, color=yellow];
320[label="24.22.114.47;s;1pkt 1fpkt", shape=diamond, color=yellow];
456[label="152.22.2.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.63.131.16:8888, 155.59.167.40:1081}[20%]&lt;BR/&gt;{24.22.114.47:6688, 155.59.167.40:1088}[20%]&lt;BR/&gt;{152.22.2.113:6699, 155.59.167.40:1087}[20%]&lt;BR/&gt;{113.100.75.1:80, 155.59.167.40:1093}[20%]&lt;BR/&gt;{113.100.75.1:80, 155.59.167.40:1094}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (14.2857%)&lt;BR/&gt; 6688: (14.2857%)&lt;BR/&gt; 1088: (14.2857%)&lt;BR/&gt; 1087: (14.2857%)&lt;BR/&gt; 80: (14.2857%)&gt;];
}
175--320[label="1;1pkt 1fpkt"];
175--456[label="1;1pkt 1fpkt"];
175--864[label="0.2;1pkt 1fpkt"];
175--882[label="0.2;1pkt 1fpkt"];
175--899[label="0.2;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.59.167.40" dst_port="1094" src_ip="113.100.75.1" src_port="80"/>
      <filter dst_ip="155.59.167.40" dst_port="1093" src_ip="113.100.75.1" src_port="80"/>
      <filter dst_ip="155.59.167.40" dst_port="1087" src_ip="152.22.2.113" src_port="6699"/>
      <filter dst_ip="155.59.167.40" dst_port="1088" src_ip="24.22.114.47" src_port="6688"/>
      <filter dst_ip="155.59.167.40" dst_port="1081" src_ip="199.63.131.16" src_port="8888"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
223[label="200.134.234.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
466[label="157.117.11.198;d;94pkt 94fpkt", shape=diamond, color=yellow];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:21, 157.117.11.198:*}[56.383%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (27.8947%)&lt;BR/&gt; 0: (8.42105%)&lt;BR/&gt; 2112: (6.84211%)&lt;BR/&gt; 60: (6.84211%)&lt;BR/&gt; 5190: (2.63158%)&gt;];
}
223--466[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="157.117.11.198" src_port="21"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
226[label="198.4.20.143;s;10pkt 10fpkt", shape=diamond, color=yellow];
467[label="157.96.201.51;d;16pkt 16fpkt", shape=diamond, color=yellow];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.4.20.143:*, 157.96.201.51:*}[62.5%]&lt;BR/&gt;{198.4.20.136:*, 157.96.201.51:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10223: (11.5385%)&lt;BR/&gt; 10123: (11.5385%)&lt;BR/&gt; 10221: (7.69231%)&lt;BR/&gt; 10121: (7.69231%)&lt;BR/&gt; 1344: (3.84615%)&gt;];
}
226--467[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="157.96.201.51" src_ip="198.4.20.143"/>
      <filter dst_ip="157.96.201.51" src_ip="198.4.20.136"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
209[label="167.223.0.87;d;65pkt 65fpkt", shape=diamond, color=yellow];
473[label="216.198.145.186;s;88pkt 88fpkt", shape=diamond, color=yellow];
1324[label="216.198.145.186;94pkt 94fpkt", shape=pentagon, color=darkviolet];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.198.145.186:*, 167.223.0.87:3128}[57.0093%]&lt;BR/&gt;{216.198.145.186:*, 167.223.52.22:13128}[30.8411%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (34.0081%)&lt;BR/&gt; 13128: (13.3603%)&lt;BR/&gt; 80: (1.417%)&lt;BR/&gt; 25: (1.21457%)&lt;BR/&gt; 1172: (0.809717%)&gt;];
}
209--473[label="0.8;52pkt 52fpkt"];
209--1324[label="0.8;52pkt 52fpkt"];
473--1324[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.0.87" dst_port="3128" src_ip="216.198.145.186"/>
      <filter dst_ip="167.223.52.22" dst_port="13128" src_ip="216.198.145.186"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
476[label="148.119.210.174;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.115.217.19:53201, 148.119.210.174:6700}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53201: (50%)&lt;BR/&gt; 6700: (50%)&gt;];
}
476--964[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.119.210.174" dst_port="6700" src_ip="216.115.217.19" src_port="53201"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="155.59.173.13"/>
      <from sec="989038800" usec="0"/>
      <to sec="989039627" usec="0"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576123,1.72015,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
199[label="212.55.11.112;d;49pkt 49fpkt", shape=diamond, color=yellow];
367[label="130.202.96.225;s;18pkt 18fpkt", shape=diamond, color=yellow];
598[label="167.223.0.68;s;1764pkt 1764fpkt", shape=diamond, color=yellow];
1076[label="167.223.0.68;2041pkt 2041fpkt", shape=pentagon, color=darkviolet];
1181[label="155.59.164.121;10pkt 10fpkt", shape=pentagon, color=darkviolet];
1420[label="130.202.96.225;20pkt 20fpkt", shape=pentagon, color=darkviolet];
1755[label="130.202.96.225;20pkt 20fpkt", shape=invtriangle, color=brown];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.223.0.68:*, *:80}[31.1515%]&lt;BR/&gt;{167.223.0.68:*, 211.76.211.248:3128}[30.8648%]&lt;BR/&gt;{167.223.0.68:1736, *:53}[26.3736%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (18.0775%)&lt;BR/&gt; 80: (16.9684%)&lt;BR/&gt; 3128: (15.3493%)&lt;BR/&gt; 1736: (13.2075%)&lt;BR/&gt; 443: (0.280469%)&gt;];
}
199--367[label="1;18pkt 18fpkt"];
199--482[label="0.387755;19pkt 19fpkt"];
199--598[label="0.0204082;1pkt 1fpkt"];
199--797[label="0.387755;19pkt 19fpkt"];
199--884[label="0.0204082;1pkt 1fpkt"];
199--901[label="0.0204082;1pkt 1fpkt"];
199--1076[label="0.0204082;1pkt 1fpkt"];
199--1181[label="1;10pkt 10fpkt"];
199--1420[label="0.85;17pkt 17fpkt"];
199--1755[label="0.85;17pkt 17fpkt"];
367--1420[label="0.944444;17pkt 17fpkt"];
367--1755[label="0.944444;17pkt 17fpkt"];
598--870[label="0.0035693;6pkt 6fpkt"];
598--871[label="0.0901361;159pkt 159fpkt"];
598--872[label="0.0493197;87pkt 87fpkt"];
598--876[label="0.0538549;95pkt 95fpkt"];
598--884[label="0.0464853;82pkt 82fpkt"];
598--887[label="0.0035693;6pkt 6fpkt"];
598--888[label="0.0901361;159pkt 159fpkt"];
598--889[label="0.0493197;87pkt 87fpkt"];
598--893[label="0.0538549;95pkt 95fpkt"];
598--901[label="0.0464853;82pkt 82fpkt"];
598--903[label="0.0035693;6pkt 6fpkt"];
598--904[label="0.0901361;159pkt 159fpkt"];
598--905[label="0.0493197;87pkt 87fpkt"];
598--909[label="0.0538549;95pkt 95fpkt"];
598--1076[label="0.999433;1763pkt 1763fpkt"];
1420--1755[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="167.223.0.68"/>
      <filter dst_ip="211.76.211.248" dst_port="3128" src_ip="167.223.0.68"/>
      <filter dst_port="53" src_ip="167.223.0.68" src_port="1736"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00365,1.69547,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
100[label="167.223.0.68;d;3294pkt 3294fpkt", shape=diamond, color=yellow];
131[label="167.223.0.80;d;288pkt 288fpkt", shape=diamond, color=yellow];
134[label="167.223.0.81;d;534pkt 534fpkt", shape=diamond, color=yellow];
356[label="216.195.6.17;s;197pkt 197fpkt", shape=diamond, color=yellow];
628[label="167.223.1.125;d;161pkt 161fpkt", shape=diamond, color=yellow];
635[label="220.217.25.87;s;25pkt 25fpkt", shape=diamond, color=yellow];
827[label="220.217.25.87;s;23pkt 23fpkt", shape=hexagon, color=black];
927[label="153.82.222.3;19pkt 19fpkt", shape=pentagon, color=darkviolet];
958[label="216.195.6.17;260pkt 260fpkt", shape=pentagon, color=darkviolet];
1011[label="199.101.17.39;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1059[label="25.144.140.56;68pkt 68fpkt", shape=pentagon, color=darkviolet];
1087[label="216.195.101.74;16pkt 16fpkt", shape=pentagon, color=darkviolet];
1099[label="216.229.20.80;16pkt 16fpkt", shape=pentagon, color=darkviolet];
1101[label="222.1.43.81;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1111[label="220.217.25.87;26pkt 26fpkt", shape=pentagon, color=darkviolet];
1112[label="103.177.174.87;60pkt 60fpkt", shape=pentagon, color=darkviolet];
1125[label="221.212.77.91;17pkt 17fpkt", shape=pentagon, color=darkviolet];
1134[label="220.24.236.94;8pkt 8fpkt", shape=pentagon, color=darkviolet];
1149[label="216.198.130.103;26pkt 26fpkt", shape=pentagon, color=darkviolet];
1202[label="199.67.96.131;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1210[label="200.128.116.135;56pkt 56fpkt", shape=pentagon, color=darkviolet];
1219[label="199.150.133.138;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1231[label="200.96.114.144;36pkt 36fpkt", shape=pentagon, color=darkviolet];
1234[label="200.96.114.146;36pkt 36fpkt", shape=pentagon, color=darkviolet];
1238[label="200.96.114.147;37pkt 37fpkt", shape=pentagon, color=darkviolet];
1263[label="216.195.6.162;7pkt 7fpkt", shape=pentagon, color=darkviolet];
1284[label="200.168.44.169;25pkt 25fpkt", shape=pentagon, color=darkviolet];
1286[label="220.241.38.170;25pkt 25fpkt", shape=pentagon, color=darkviolet];
1304[label="25.128.6.179;16pkt 16fpkt", shape=pentagon, color=darkviolet];
1333[label="216.76.191.192;9pkt 9fpkt", shape=pentagon, color=darkviolet];
1338[label="216.76.191.193;144pkt 144fpkt", shape=pentagon, color=darkviolet];
1353[label="201.59.126.200;43pkt 43fpkt", shape=pentagon, color=darkviolet];
1356[label="216.76.191.200;19pkt 19fpkt", shape=pentagon, color=darkviolet];
1363[label="25.128.4.203;14pkt 14fpkt", shape=pentagon, color=darkviolet];
1376[label="199.101.17.208;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1393[label="102.117.179.213;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1402[label="217.237.149.215;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1447[label="198.16.139.232;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1465[label="165.214.94.242;6pkt 6fpkt", shape=pentagon, color=darkviolet];
1466[label="165.214.94.243;28pkt 28fpkt", shape=pentagon, color=darkviolet];
1511[label="222.75.136.21;22pkt 22fpkt", shape=invtriangle, color=brown];
1533[label="199.101.17.39;13pkt 13fpkt", shape=invtriangle, color=brown];
1561[label="25.144.140.56;68pkt 68fpkt", shape=invtriangle, color=brown];
1580[label="216.195.101.74;17pkt 17fpkt", shape=invtriangle, color=brown];
1585[label="216.229.20.80;16pkt 16fpkt", shape=invtriangle, color=brown];
1586[label="222.1.43.81;3pkt 3fpkt", shape=invtriangle, color=brown];
1604[label="220.24.236.94;8pkt 8fpkt", shape=invtriangle, color=brown];
1635[label="199.67.96.131;4pkt 4fpkt", shape=invtriangle, color=brown];
1645[label="199.150.133.138;13pkt 13fpkt", shape=invtriangle, color=brown];
1656[label="200.96.114.144;36pkt 36fpkt", shape=invtriangle, color=brown];
1659[label="200.96.114.147;37pkt 37fpkt", shape=invtriangle, color=brown];
1663[label="25.128.3.152;9pkt 9fpkt", shape=invtriangle, color=brown];
1677[label="216.195.6.162;6pkt 6fpkt", shape=invtriangle, color=brown];
1689[label="200.168.44.169;25pkt 25fpkt", shape=invtriangle, color=brown];
1691[label="220.241.38.170;25pkt 25fpkt", shape=invtriangle, color=brown];
1697[label="25.128.6.179;16pkt 16fpkt", shape=invtriangle, color=brown];
1718[label="200.1.71.197;4pkt 4fpkt", shape=invtriangle, color=brown];
1721[label="201.59.126.200;43pkt 43fpkt", shape=invtriangle, color=brown];
1745[label="217.237.149.215;10pkt 10fpkt", shape=invtriangle, color=brown];
1769[label="198.16.139.232;1pkt 1fpkt", shape=invtriangle, color=brown];
1771[label="103.131.254.233;42pkt 42fpkt", shape=invtriangle, color=brown];
1777[label="165.214.94.243;28pkt 28fpkt", shape=invtriangle, color=brown];
1810[label="199.101.17.39;14pkt 14fpkt", shape=invhouse, color=bisque];
1841[label="222.1.43.81;3pkt 3fpkt", shape=invhouse, color=bisque];
1853[label="220.24.236.94;9pkt 9fpkt", shape=invhouse, color=bisque];
1867[label="199.67.96.131;4pkt 4fpkt", shape=invhouse, color=bisque];
1878[label="200.96.114.144;37pkt 37fpkt", shape=invhouse, color=bisque];
1881[label="25.128.3.152;8pkt 8fpkt", shape=invhouse, color=bisque];
1899[label="200.168.44.169;25pkt 25fpkt", shape=invhouse, color=bisque];
1917[label="201.59.126.200;42pkt 42fpkt", shape=invhouse, color=bisque];
1947[label="198.16.139.232;1pkt 1fpkt", shape=invhouse, color=bisque];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[37.6989%]&lt;BR/&gt;{222.164.137.108:3128, 167.223.0.68:*}[31.069%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22.681%)&lt;BR/&gt; 3128: (13.405%)&lt;BR/&gt; 53: (10.0275%)&lt;BR/&gt; 1736: (4.84809%)&lt;BR/&gt; 25: (1.60795%)&gt;];
}
100--120[label="0.647409;1524pkt 1524fpkt"];
100--356[label="0.446701;88pkt 88fpkt"];
100--382[label="0.00412088;3pkt 3fpkt"];
100--432[label="1;9pkt 9fpkt"];
100--485[label="0.00625;1pkt 1fpkt"];
100--487[label="0.893617;84pkt 84fpkt"];
100--557[label="0.00694444;3pkt 3fpkt"];
100--568[label="0.0446429;5pkt 5fpkt"];
100--635[label="0.96;24pkt 24fpkt"];
100--649[label="0.00263852;1pkt 1fpkt"];
100--715[label="0.0769231;1pkt 1fpkt"];
100--722[label="0.05;1pkt 1fpkt"];
100--777[label="0.00554017;2pkt 2fpkt"];
100--827[label="0.956522;22pkt 22fpkt"];
100--836[label="0.00263852;1pkt 1fpkt"];
100--859[label="0.00554017;2pkt 2fpkt"];
100--862[label="0.00263852;1pkt 1fpkt"];
100--864[label="0.0940557;125pkt 125fpkt"];
100--870[label="0.0107079;18pkt 18fpkt"];
100--871[label="0.0157863;52pkt 52fpkt"];
100--876[label="0.00910747;30pkt 30fpkt"];
100--882[label="0.0940557;125pkt 125fpkt"];
100--887[label="0.0107079;18pkt 18fpkt"];
100--888[label="0.0157863;52pkt 52fpkt"];
100--893[label="0.00910747;30pkt 30fpkt"];
100--899[label="0.0940557;125pkt 125fpkt"];
100--903[label="0.0107079;18pkt 18fpkt"];
100--904[label="0.0157863;52pkt 52fpkt"];
100--909[label="0.00910747;30pkt 30fpkt"];
100--945[label="0.00546448;1pkt 1fpkt"];
100--951[label="0.0232558;1pkt 1fpkt"];
100--952[label="0.0266667;2pkt 2fpkt"];
100--957[label="0.0769231;1pkt 1fpkt"];
100--958[label="0.338462;88pkt 88fpkt"];
100--968[label="0.0454545;1pkt 1fpkt"];
100--969[label="0.0119048;1pkt 1fpkt"];
100--977[label="1;1pkt 1fpkt"];
100--984[label="0.222222;2pkt 2fpkt"];
100--989[label="0.333333;1pkt 1fpkt"];
100--1027[label="0.125;1pkt 1fpkt"];
100--1034[label="0.0113636;1pkt 1fpkt"];
100--1038[label="0.00356718;3pkt 3fpkt"];
100--1044[label="0.0555556;2pkt 2fpkt"];
100--1045[label="0.2;1pkt 1fpkt"];
100--1048[label="1;12pkt 12fpkt"];
100--1053[label="0.0217391;1pkt 1fpkt"];
100--1059[label="0.0147059;1pkt 1fpkt"];
100--1087[label="0.875;14pkt 14fpkt"];
100--1099[label="0.6875;11pkt 11fpkt"];
100--1101[label="1;3pkt 3fpkt"];
100--1104[label="0.0166667;1pkt 1fpkt"];
100--1105[label="0.0714286;1pkt 1fpkt"];
100--1111[label="0.923077;24pkt 24fpkt"];
100--1112[label="0.0166667;1pkt 1fpkt"];
100--1125[label="0.0588235;1pkt 1fpkt"];
100--1127[label="0.0128205;1pkt 1fpkt"];
100--1133[label="0.037037;1pkt 1fpkt"];
100--1134[label="0.125;1pkt 1fpkt"];
100--1149[label="0.769231;20pkt 20fpkt"];
100--1156[label="1;8pkt 8fpkt"];
100--1167[label="0.00440529;1pkt 1fpkt"];
100--1168[label="0.0416667;5pkt 5fpkt"];
100--1173[label="0.0153846;1pkt 1fpkt"];
100--1210[label="0.0535714;3pkt 3fpkt"];
100--1219[label="0.692308;9pkt 9fpkt"];
100--1231[label="0.25;9pkt 9fpkt"];
100--1234[label="0.222222;8pkt 8fpkt"];
100--1238[label="0.243243;9pkt 9fpkt"];
100--1260[label="0.0140845;1pkt 1fpkt"];
100--1263[label="0.428571;3pkt 3fpkt"];
100--1272[label="0.0121951;1pkt 1fpkt"];
100--1284[label="0.08;2pkt 2fpkt"];
100--1304[label="0.3125;5pkt 5fpkt"];
100--1325[label="0.0789474;3pkt 3fpkt"];
100--1333[label="0.888889;8pkt 8fpkt"];
100--1338[label="0.659722;95pkt 95fpkt"];
100--1353[label="0.0232558;1pkt 1fpkt"];
100--1356[label="0.157895;3pkt 3fpkt"];
100--1357[label="0.0140845;1pkt 1fpkt"];
100--1363[label="0.142857;2pkt 2fpkt"];
100--1367[label="0.0117647;1pkt 1fpkt"];
100--1393[label="0.666667;2pkt 2fpkt"];
100--1399[label="0.0625;2pkt 2fpkt"];
100--1447[label="1;1pkt 1fpkt"];
100--1452[label="0.0238095;1pkt 1fpkt"];
100--1458[label="0.0666667;1pkt 1fpkt"];
100--1466[label="0.0357143;1pkt 1fpkt"];
100--1501[label="0.00552486;1pkt 1fpkt"];
100--1503[label="0.0232558;1pkt 1fpkt"];
100--1505[label="0.0769231;1pkt 1fpkt"];
100--1511[label="0.0454545;1pkt 1fpkt"];
100--1520[label="0.2;2pkt 2fpkt"];
100--1543[label="0.142857;1pkt 1fpkt"];
100--1546[label="0.0114943;1pkt 1fpkt"];
100--1549[label="0.00356718;3pkt 3fpkt"];
100--1551[label="1;12pkt 12fpkt"];
100--1556[label="0.0217391;1pkt 1fpkt"];
100--1561[label="0.0147059;1pkt 1fpkt"];
100--1580[label="0.882353;15pkt 15fpkt"];
100--1585[label="0.6875;11pkt 11fpkt"];
100--1586[label="1;3pkt 3fpkt"];
100--1588[label="0.0166667;1pkt 1fpkt"];
100--1604[label="0.125;1pkt 1fpkt"];
100--1615[label="0.00440529;1pkt 1fpkt"];
100--1617[label="0.0416667;5pkt 5fpkt"];
100--1645[label="0.692308;9pkt 9fpkt"];
100--1656[label="0.25;9pkt 9fpkt"];
100--1659[label="0.243243;9pkt 9fpkt"];
100--1677[label="0.333333;2pkt 2fpkt"];
100--1682[label="0.0123457;1pkt 1fpkt"];
100--1689[label="0.08;2pkt 2fpkt"];
100--1697[label="0.3125;5pkt 5fpkt"];
100--1707[label="0.0789474;3pkt 3fpkt"];
100--1718[label="0.25;1pkt 1fpkt"];
100--1721[label="0.0232558;1pkt 1fpkt"];
100--1723[label="0.0140845;1pkt 1fpkt"];
100--1769[label="1;1pkt 1fpkt"];
100--1771[label="0.0238095;1pkt 1fpkt"];
100--1777[label="0.0357143;1pkt 1fpkt"];
100--1810[label="0.0714286;1pkt 1fpkt"];
100--1816[label="0.00238095;2pkt 2fpkt"];
100--1841[label="1;3pkt 3fpkt"];
100--1842[label="0.0169492;1pkt 1fpkt"];
100--1852[label="0.0357143;1pkt 1fpkt"];
100--1853[label="0.111111;1pkt 1fpkt"];
100--1856[label="0.0416667;5pkt 5fpkt"];
100--1878[label="0.27027;10pkt 10fpkt"];
100--1893[label="0.0121951;1pkt 1fpkt"];
100--1899[label="0.08;2pkt 2fpkt"];
100--1917[label="0.0238095;1pkt 1fpkt"];
100--1919[label="0.0140845;1pkt 1fpkt"];
100--1947[label="1;1pkt 1fpkt"];
131--356[label="0.101523;20pkt 20fpkt"];
131--568[label="0.125;14pkt 14fpkt"];
131--864[label="0.0833333;24pkt 24fpkt"];
131--882[label="0.0833333;24pkt 24fpkt"];
131--899[label="0.0833333;24pkt 24fpkt"];
131--958[label="0.0769231;20pkt 20fpkt"];
131--1011[label="0.538462;7pkt 7fpkt"];
131--1168[label="0.116667;14pkt 14fpkt"];
131--1230[label="1;13pkt 13fpkt"];
131--1231[label="0.0277778;1pkt 1fpkt"];
131--1252[label="1;3pkt 3fpkt"];
131--1263[label="0.285714;2pkt 2fpkt"];
131--1304[label="0.1875;3pkt 3fpkt"];
131--1305[label="0.8;12pkt 12fpkt"];
131--1325[label="0.0263158;1pkt 1fpkt"];
131--1376[label="0.636364;7pkt 7fpkt"];
131--1402[label="0.181818;2pkt 2fpkt"];
131--1465[label="0.833333;5pkt 5fpkt"];
131--1533[label="0.538462;7pkt 7fpkt"];
131--1617[label="0.116667;14pkt 14fpkt"];
131--1655[label="1;14pkt 14fpkt"];
131--1656[label="0.0277778;1pkt 1fpkt"];
131--1669[label="1;3pkt 3fpkt"];
131--1677[label="0.333333;2pkt 2fpkt"];
131--1697[label="0.1875;3pkt 3fpkt"];
131--1707[label="0.0263158;1pkt 1fpkt"];
131--1745[label="0.2;2pkt 2fpkt"];
131--1810[label="0.5;7pkt 7fpkt"];
131--1856[label="0.116667;14pkt 14fpkt"];
131--1878[label="0.027027;1pkt 1fpkt"];
134--356[label="0.101523;20pkt 20fpkt"];
134--487[label="0.0638298;6pkt 6fpkt"];
134--561[label="0.01;1pkt 1fpkt"];
134--568[label="0.232143;26pkt 26fpkt"];
134--652[label="0.4;2pkt 2fpkt"];
134--799[label="0.0140845;1pkt 1fpkt"];
134--864[label="0.0973783;52pkt 52fpkt"];
134--882[label="0.0973783;52pkt 52fpkt"];
134--899[label="0.0973783;52pkt 52fpkt"];
134--958[label="0.0769231;20pkt 20fpkt"];
134--1008[label="1;1pkt 1fpkt"];
134--1011[label="0.0769231;1pkt 1fpkt"];
134--1168[label="0.216667;26pkt 26fpkt"];
134--1219[label="0.0769231;1pkt 1fpkt"];
134--1231[label="0.527778;19pkt 19fpkt"];
134--1234[label="0.555556;20pkt 20fpkt"];
134--1238[label="0.513514;19pkt 19fpkt"];
134--1242[label="0.25;2pkt 2fpkt"];
134--1284[label="0.2;5pkt 5fpkt"];
134--1286[label="0.84;21pkt 21fpkt"];
134--1304[label="0.125;2pkt 2fpkt"];
134--1325[label="0.0526316;2pkt 2fpkt"];
134--1338[label="0.118056;17pkt 17fpkt"];
134--1376[label="0.272727;3pkt 3fpkt"];
134--1402[label="0.0909091;1pkt 1fpkt"];
134--1530[label="1;1pkt 1fpkt"];
134--1533[label="0.0769231;1pkt 1fpkt"];
134--1617[label="0.216667;26pkt 26fpkt"];
134--1645[label="0.0769231;1pkt 1fpkt"];
134--1656[label="0.527778;19pkt 19fpkt"];
134--1659[label="0.513514;19pkt 19fpkt"];
134--1663[label="0.222222;2pkt 2fpkt"];
134--1689[label="0.2;5pkt 5fpkt"];
134--1691[label="0.84;21pkt 21fpkt"];
134--1697[label="0.125;2pkt 2fpkt"];
134--1707[label="0.0526316;2pkt 2fpkt"];
134--1745[label="0.1;1pkt 1fpkt"];
134--1810[label="0.0714286;1pkt 1fpkt"];
134--1856[label="0.216667;26pkt 26fpkt"];
134--1878[label="0.513514;19pkt 19fpkt"];
134--1881[label="0.25;2pkt 2fpkt"];
134--1899[label="0.2;5pkt 5fpkt"];
356--864[label="0.111675;22pkt 22fpkt"];
356--882[label="0.111675;22pkt 22fpkt"];
356--899[label="0.111675;22pkt 22fpkt"];
356--958[label="1;197pkt 197fpkt"];
628--864[label="0.0931677;15pkt 15fpkt"];
628--882[label="0.0931677;15pkt 15fpkt"];
628--899[label="0.0931677;15pkt 15fpkt"];
628--919[label="0.666667;6pkt 6fpkt"];
628--927[label="1;19pkt 19fpkt"];
628--985[label="1;40pkt 40fpkt"];
628--1164[label="0.0333333;1pkt 1fpkt"];
628--1202[label="1;5pkt 5fpkt"];
628--1263[label="0.142857;1pkt 1fpkt"];
628--1484[label="0.666667;6pkt 6fpkt"];
628--1614[label="0.0333333;1pkt 1fpkt"];
628--1635[label="1;4pkt 4fpkt"];
628--1677[label="0.166667;1pkt 1fpkt"];
628--1855[label="0.0333333;1pkt 1fpkt"];
628--1867[label="1;4pkt 4fpkt"];
635--827[label="1;23pkt 23fpkt"];
635--1111[label="0.96;24pkt 24fpkt"];
827--1111[label="0.956522;22pkt 22fpkt"];
1011--1533[label="1;13pkt 13fpkt"];
1011--1810[label="1;13pkt 13fpkt"];
1059--1561[label="1;68pkt 68fpkt"];
1087--1580[label="1;16pkt 16fpkt"];
1099--1585[label="1;16pkt 16fpkt"];
1101--1586[label="1;3pkt 3fpkt"];
1101--1841[label="1;3pkt 3fpkt"];
1134--1604[label="1;8pkt 8fpkt"];
1134--1853[label="1;8pkt 8fpkt"];
1202--1635[label="1;4pkt 4fpkt"];
1202--1867[label="1;4pkt 4fpkt"];
1219--1645[label="1;13pkt 13fpkt"];
1231--1656[label="1;36pkt 36fpkt"];
1231--1878[label="1;36pkt 36fpkt"];
1238--1659[label="1;37pkt 37fpkt"];
1263--1677[label="1;6pkt 6fpkt"];
1284--1689[label="1;25pkt 25fpkt"];
1284--1899[label="1;25pkt 25fpkt"];
1286--1691[label="1;25pkt 25fpkt"];
1304--1697[label="1;16pkt 16fpkt"];
1353--1721[label="1;43pkt 43fpkt"];
1353--1917[label="1;42pkt 42fpkt"];
1402--1745[label="1;10pkt 10fpkt"];
1447--1769[label="1;1pkt 1fpkt"];
1447--1947[label="1;1pkt 1fpkt"];
1466--1777[label="1;28pkt 28fpkt"];
1511--1803[label="1;21pkt 21fpkt"];
1533--1810[label="1;13pkt 13fpkt"];
1586--1841[label="1;3pkt 3fpkt"];
1604--1853[label="1;8pkt 8fpkt"];
1635--1867[label="1;4pkt 4fpkt"];
1656--1878[label="1;36pkt 36fpkt"];
1663--1881[label="1;8pkt 8fpkt"];
1689--1899[label="1;25pkt 25fpkt"];
1721--1917[label="1;42pkt 42fpkt"];
1769--1947[label="1;1pkt 1fpkt"];
1771--1948[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="167.223.0.68" src_ip="222.164.137.108" src_port="3128"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
1384[label="198.207.29.210;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.207.29.210:1627, 155.59.196.1:53}[20%]&lt;BR/&gt;{198.207.29.210:1627, 157.96.193.27:53}[20%]&lt;BR/&gt;{198.207.29.210:1627, 211.144.57.41:53}[20%]&lt;BR/&gt;{198.207.29.210:1627, 216.168.103.175:53}[20%]&lt;BR/&gt;{198.207.29.210:1627, 217.22.126.226:53}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1627: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
1384--1738[label="1;5pkt 5fpkt"];
1384--1928[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="217.22.126.226" dst_port="53" src_ip="198.207.29.210" src_port="1627"/>
      <filter dst_ip="216.168.103.175" dst_port="53" src_ip="198.207.29.210" src_port="1627"/>
      <filter dst_ip="211.144.57.41" dst_port="53" src_ip="198.207.29.210" src_port="1627"/>
      <filter dst_ip="157.96.193.27" dst_port="53" src_ip="198.207.29.210" src_port="1627"/>
      <filter dst_ip="155.59.196.1" dst_port="53" src_ip="198.207.29.210" src_port="1627"/>
    </slice>
    <from sec="989039485" usec="0"/>
    <to sec="989039645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
335[label="216.162.194.105;s;1pkt 1fpkt", shape=diamond, color=yellow];
336[label="216.116.210.244;d;6pkt 6fpkt", shape=diamond, color=yellow];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.96.200.149:*, 216.116.210.244:21}[66.6667%]&lt;BR/&gt;{*:*, 216.116.210.244:20}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (28.5714%)&lt;BR/&gt; 20: (21.4286%)&lt;BR/&gt; 1504: (14.2857%)&lt;BR/&gt; 61057: (7.14286%)&lt;BR/&gt; 61055: (7.14286%)&gt;];
}
335--336[label="1;1pkt 1fpkt"];
336--506[label="0.833333;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="216.116.210.244" dst_port="20"/>
      <filter dst_ip="216.116.210.244" dst_port="21" src_ip="157.96.200.149"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
570[label="216.122.28.76;d;226pkt 226fpkt", shape=diamond, color=yellow];
1480[label="216.117.3.255;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.55.242.173:*, 216.122.28.76:80}[76.5487%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.3782%)&lt;BR/&gt; 53: (5.2521%)&lt;BR/&gt; 32775: (1.89076%)&lt;BR/&gt; 34649: (0.420168%)&lt;BR/&gt; 34639: (0.420168%)&gt;];
}
570--870[label="0.00442478;1pkt 1fpkt"];
570--872[label="0.0530973;12pkt 12fpkt"];
570--876[label="0.00442478;1pkt 1fpkt"];
570--884[label="0.0176991;4pkt 4fpkt"];
570--887[label="0.00442478;1pkt 1fpkt"];
570--889[label="0.0530973;12pkt 12fpkt"];
570--893[label="0.00442478;1pkt 1fpkt"];
570--901[label="0.0176991;4pkt 4fpkt"];
570--903[label="0.00442478;1pkt 1fpkt"];
570--905[label="0.0530973;12pkt 12fpkt"];
570--909[label="0.00442478;1pkt 1fpkt"];
570--1020[label="0.0588235;2pkt 2fpkt"];
570--1260[label="0.0140845;1pkt 1fpkt"];
570--1349[label="0.0232558;1pkt 1fpkt"];
570--1367[label="0.0117647;1pkt 1fpkt"];
570--1463[label="0.047619;1pkt 1fpkt"];
570--1480[label="1;12pkt 12fpkt"];
570--1719[label="0.0227273;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.122.28.76" dst_port="80" src_ip="217.55.242.173"/>
    </slice>
    <from sec="989038824" usec="0"/>
    <to sec="989039625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
127[label="157.96.152.210;s;7pkt 7fpkt", shape=diamond, color=yellow];
400[label="103.2.160.182;d;3pkt 3fpkt", shape=diamond, color=yellow];
519[label="25.40.89.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.96.152.210:6699, 103.2.160.182:*}[57.1429%]&lt;BR/&gt;{157.96.152.210:0, *:0}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (40.9091%)&lt;BR/&gt; 0: (18.1818%)&lt;BR/&gt; 1440: (9.09091%)&lt;BR/&gt; 1287: (9.09091%)&lt;BR/&gt; 1286: (9.09091%)&gt;];
}
127--400[label="1;3pkt 3fpkt"];
127--519[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="103.2.160.182" src_ip="157.96.152.210" src_port="6699"/>
      <filter src_ip="157.96.152.210"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
488[label="217.22.121.232;s;142pkt 142fpkt", shape=diamond, color=yellow];
1446[label="217.22.121.232;141pkt 141fpkt", shape=pentagon, color=darkviolet];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.22.121.232:80, 25.185.176.105:*}[99.2958%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4850: (0.353357%)&lt;BR/&gt; 4849: (0.353357%)&lt;BR/&gt; 4846: (0.353357%)&lt;BR/&gt; 4787: (0.353357%)&gt;];
}
488--523[label="0.992958;141pkt 141fpkt"];
488--1446[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter dst_ip="25.185.176.105" src_ip="217.22.121.232" src_port="80"/>
    </slice>
    <from sec="989038801" usec="0"/>
    <to sec="989039551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
123[label="197.72.196.221;s;2pkt 2fpkt", shape=diamond, color=yellow];
527[label="130.202.210.6;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.72.196.221:2921, 130.202.210.6:5500}[50%]&lt;BR/&gt;{197.72.196.221:4271, 130.202.210.6:5501}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5501: (33.3333%)&lt;BR/&gt; 4271: (33.3333%)&lt;BR/&gt; 5500: (16.6667%)&lt;BR/&gt; 2921: (16.6667%)&gt;];
}
123--527[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.210.6" dst_port="5501" src_ip="197.72.196.221" src_port="4271"/>
      <filter dst_ip="130.202.210.6" dst_port="5500" src_ip="197.72.196.221" src_port="2921"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
529[label="197.149.140.22;s;6pkt 6fpkt", shape=diamond, color=yellow];
530[label="157.96.202.38;d;9pkt 9fpkt", shape=diamond, color=yellow];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.149.140.22:8080, 157.96.202.38:*}[60%]&lt;BR/&gt;{200.114.232.51:80, 157.96.202.38:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (36.6667%)&lt;BR/&gt; 80: (13.3333%)&lt;BR/&gt; 1288: (6.66667%)&lt;BR/&gt; 1286: (6.66667%)&lt;BR/&gt; 1229: (6.66667%)&gt;];
}
529--530[label="0.833333;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="157.96.202.38" src_ip="197.149.140.22" src_port="8080"/>
      <filter dst_ip="157.96.202.38" src_ip="200.114.232.51" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
325[label="157.96.210.91;s;4pkt 4fpkt", shape=diamond, color=yellow];
533[label="26.226.34.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.96.210.91:6700, 26.226.34.11:1260}[25%]&lt;BR/&gt;{157.96.210.91:0, 200.244.216.11:0}[25%]&lt;BR/&gt;{157.96.210.91:0, 70.129.102.159:0}[25%]&lt;BR/&gt;{157.96.210.91:0, 130.82.0.172:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (60%)&lt;BR/&gt; 6700: (20%)&lt;BR/&gt; 1260: (20%)&gt;];
}
325--533[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.82.0.172" src_ip="157.96.210.91"/>
      <filter dst_ip="70.129.102.159" src_ip="157.96.210.91"/>
      <filter dst_ip="200.244.216.11" src_ip="157.96.210.91"/>
      <filter dst_ip="26.226.34.11" dst_port="1260" src_ip="157.96.210.91" src_port="6700"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
161[label="25.9.11.144;d;49pkt 49fpkt", shape=diamond, color=yellow];
556[label="155.59.64.198;s;24pkt 24fpkt", shape=diamond, color=yellow];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.59.170.83:*, 25.9.11.144:80}[65.7143%]&lt;BR/&gt;{155.59.64.198:*, *:80}[34.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2276: (1.36986%)&lt;BR/&gt; 2268: (1.36986%)&lt;BR/&gt; 2237: (1.36986%)&lt;BR/&gt; 33210: (0.684932%)&gt;];
}
161--203[label="0.938776;46pkt 46fpkt"];
161--556[label="0.125;3pkt 3fpkt"];
161--772[label="0.938776;46pkt 46fpkt"];
556--872[label="0.0833333;2pkt 2fpkt"];
556--884[label="0.0833333;2pkt 2fpkt"];
556--889[label="0.0833333;2pkt 2fpkt"];
556--901[label="0.0833333;2pkt 2fpkt"];
556--905[label="0.0833333;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="155.59.64.198"/>
      <filter dst_ip="25.9.11.144" dst_port="80" src_ip="155.59.170.83"/>
    </slice>
    <from sec="989038802" usec="0"/>
    <to sec="989039563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576123,1.72015,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
491[label="216.202.15.245;s;38pkt 38fpkt", shape=diamond, color=yellow];
665[label="167.223.52.66;d;121pkt 121fpkt", shape=diamond, color=yellow];
992[label="216.198.143.31;12pkt 12fpkt", shape=pentagon, color=darkviolet];
1469[label="216.202.15.245;41pkt 41fpkt", shape=pentagon, color=darkviolet];
1778[label="216.202.15.245;40pkt 40fpkt", shape=invtriangle, color=brown];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 167.223.52.66:53}[67.0588%]&lt;BR/&gt;{216.202.15.245:*, *:80}[24.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (27.5794%)&lt;BR/&gt; 80: (26.9841%)&lt;BR/&gt; 59352: (0.793651%)&lt;BR/&gt; 58995: (0.793651%)&lt;BR/&gt; 58975: (0.793651%)&gt;];
}
491--558[label="0.46875;15pkt 15fpkt"];
491--665[label="0.0789474;3pkt 3fpkt"];
491--872[label="0.263158;10pkt 10fpkt"];
491--884[label="0.289474;11pkt 11fpkt"];
491--889[label="0.263158;10pkt 10fpkt"];
491--901[label="0.289474;11pkt 11fpkt"];
491--905[label="0.263158;10pkt 10fpkt"];
491--1469[label="1;38pkt 38fpkt"];
491--1778[label="1;38pkt 38fpkt"];
665--715[label="0.0769231;1pkt 1fpkt"];
665--722[label="0.05;1pkt 1fpkt"];
665--870[label="0.0413223;5pkt 5fpkt"];
665--871[label="0.123967;15pkt 15fpkt"];
665--872[label="0.00826446;1pkt 1fpkt"];
665--876[label="0.115702;14pkt 14fpkt"];
665--884[label="0.00826446;1pkt 1fpkt"];
665--887[label="0.0413223;5pkt 5fpkt"];
665--888[label="0.123967;15pkt 15fpkt"];
665--889[label="0.00826446;1pkt 1fpkt"];
665--893[label="0.115702;14pkt 14fpkt"];
665--901[label="0.00826446;1pkt 1fpkt"];
665--903[label="0.0413223;5pkt 5fpkt"];
665--904[label="0.123967;15pkt 15fpkt"];
665--905[label="0.00826446;1pkt 1fpkt"];
665--909[label="0.115702;14pkt 14fpkt"];
665--957[label="0.0769231;1pkt 1fpkt"];
665--971[label="0.0344828;1pkt 1fpkt"];
665--989[label="0.333333;1pkt 1fpkt"];
665--992[label="0.0833333;1pkt 1fpkt"];
665--1044[label="0.0277778;1pkt 1fpkt"];
665--1125[label="0.0588235;1pkt 1fpkt"];
665--1399[label="0.03125;1pkt 1fpkt"];
665--1469[label="0.0731707;3pkt 3fpkt"];
665--1505[label="0.0769231;1pkt 1fpkt"];
665--1513[label="0.0357143;1pkt 1fpkt"];
665--1523[label="0.5;1pkt 1fpkt"];
665--1778[label="0.075;3pkt 3fpkt"];
665--1804[label="0.0344828;1pkt 1fpkt"];
1469--1778[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="216.202.15.245"/>
      <filter dst_ip="167.223.52.66" dst_port="53"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00365,1.69547,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
277[label="160.90.43.211;d;25pkt 25fpkt", shape=diamond, color=yellow];
589[label="102.69.10.33;s;1pkt 1fpkt", shape=diamond, color=yellow];
838[label="102.69.10.33;s;1pkt 1fpkt", shape=hexagon, color=black];
1387[label="25.105.14.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1739[label="25.105.14.211;1pkt 1fpkt", shape=invtriangle, color=brown];
1929[label="25.105.14.211;1pkt 1fpkt", shape=invhouse, color=bisque];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{102.169.68.148:80, 160.90.43.211:*}[36%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1428: (6.66667%)&lt;BR/&gt; 1420: (5%)&lt;BR/&gt; 1436: (1.66667%)&lt;BR/&gt; 1435: (1.66667%)&gt;];
}
277--374[label="1;1pkt 1fpkt"];
277--589[label="1;1pkt 1fpkt"];
277--838[label="1;1pkt 1fpkt"];
277--864[label="0.12;3pkt 3fpkt"];
277--882[label="0.12;3pkt 3fpkt"];
277--899[label="0.12;3pkt 3fpkt"];
277--1066[label="1;1pkt 1fpkt"];
277--1387[label="1;1pkt 1fpkt"];
277--1528[label="1;1pkt 1fpkt"];
277--1566[label="1;1pkt 1fpkt"];
277--1739[label="1;1pkt 1fpkt"];
277--1929[label="1;1pkt 1fpkt"];
589--838[label="1;1pkt 1fpkt"];
1387--1739[label="1;1pkt 1fpkt"];
1387--1929[label="1;1pkt 1fpkt"];
1739--1929[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.90.43.211" src_ip="102.169.68.148" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
110[label="102.108.93.198;d;1pkt 1fpkt", shape=diamond, color=yellow];
178[label="70.44.6.125;d;1pkt 1fpkt", shape=diamond, color=yellow];
216[label="70.101.224.245;d;1pkt 1fpkt", shape=diamond, color=yellow];
218[label="70.70.232.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
232[label="147.76.138.245;d;1pkt 1fpkt", shape=diamond, color=yellow];
240[label="70.236.212.213;d;1pkt 1fpkt", shape=diamond, color=yellow];
254[label="198.204.249.176;d;1pkt 1fpkt", shape=diamond, color=yellow];
298[label="26.215.198.87;d;1pkt 1fpkt", shape=diamond, color=yellow];
437[label="102.175.99.222;d;1pkt 1fpkt", shape=diamond, color=yellow];
544[label="102.26.66.84;d;1pkt 1fpkt", shape=diamond, color=yellow];
591[label="160.90.43.229;s;41pkt 41fpkt", shape=diamond, color=yellow];
607[label="26.130.13.41;d;1pkt 1fpkt", shape=diamond, color=yellow];
686[label="70.196.201.135;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.90.43.229:*, 222.147.60.61:6346}[21.9512%]&lt;BR/&gt;{160.90.43.229:*, 70.92.139.247:6346}[21.9512%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (47.1698%)&lt;BR/&gt; 6347: (1.88679%)&lt;BR/&gt; 2797: (1.88679%)&lt;BR/&gt; 2796: (1.88679%)&lt;BR/&gt; 2790: (1.88679%)&gt;];
}
110--591[label="1;1pkt 1fpkt"];
178--591[label="1;1pkt 1fpkt"];
216--591[label="1;1pkt 1fpkt"];
218--591[label="1;1pkt 1fpkt"];
232--591[label="1;1pkt 1fpkt"];
240--591[label="1;1pkt 1fpkt"];
254--591[label="1;1pkt 1fpkt"];
298--591[label="1;1pkt 1fpkt"];
437--591[label="1;1pkt 1fpkt"];
544--591[label="1;1pkt 1fpkt"];
591--607[label="1;1pkt 1fpkt"];
591--686[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="70.92.139.247" dst_port="6346" src_ip="160.90.43.229"/>
      <filter dst_ip="222.147.60.61" dst_port="6346" src_ip="160.90.43.229"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576123,1.72015,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
531[label="157.96.202.38;s;112pkt 112fpkt", shape=diamond, color=yellow];
601[label="197.149.140.22;d;7pkt 7fpkt", shape=diamond, color=yellow];
699[label="85.130.28.163;d;76pkt 76fpkt", shape=diamond, color=yellow];
1010[label="157.96.202.38;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1532[label="157.96.202.38;2pkt 2fpkt", shape=invtriangle, color=brown];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.96.202.38:*, 85.130.28.163:80}[68.1416%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.7286%)&lt;BR/&gt; 8080: (4.27136%)&lt;BR/&gt; 1435: (0.753769%)&lt;BR/&gt; 1440: (0.502513%)&lt;BR/&gt; 1438: (0.502513%)&gt;];
}
531--601[label="1;7pkt 7fpkt"];
531--699[label="1;76pkt 76fpkt"];
531--1010[label="0.5;1pkt 1fpkt"];
531--1532[label="0.5;1pkt 1fpkt"];
1010--1532[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="85.130.28.163" dst_port="80" src_ip="157.96.202.38"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="168.82.24.103"/>
      <from sec="989038800" usec="0"/>
      <to sec="989039536" usec="0"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
271[label="216.78.177.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.22.126.20:0, 216.78.177.8:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
271--354[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.78.177.8" src_ip="217.22.126.20"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
543[label="130.202.162.246;s;2pkt 2fpkt", shape=diamond, color=yellow];
613[label="192.67.34.85;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.202.162.246:3656, 192.67.34.85:554}[50%]&lt;BR/&gt;{130.202.162.246:6970, 192.67.34.85:22226}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22226: (25%)&lt;BR/&gt; 6970: (25%)&lt;BR/&gt; 3656: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
543--613[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.67.34.85" dst_port="22226" src_ip="130.202.162.246" src_port="6970"/>
      <filter dst_ip="192.67.34.85" dst_port="554" src_ip="130.202.162.246" src_port="3656"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="167.223.33.150"/>
      <from sec="989038804" usec="0"/>
      <to sec="989039626" usec="0"/>
    </slice>
    <from sec="989038804" usec="0"/>
    <to sec="989039626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
157[label="197.0.196.207;s;30pkt 30fpkt", shape=diamond, color=yellow];
646[label="130.202.144.46;d;55pkt 55fpkt", shape=diamond, color=yellow];
696[label="155.59.233.17;d;24pkt 24fpkt", shape=diamond, color=yellow];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.167.3.15:80, 130.202.144.46:*}[39.2857%]&lt;BR/&gt;{197.0.196.207:80, 155.59.233.17:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38877: (0.917431%)&lt;BR/&gt; 38876: (0.917431%)&lt;BR/&gt; 38875: (0.917431%)&lt;BR/&gt; 38874: (0.917431%)&gt;];
}
157--638[label="0.0333333;1pkt 1fpkt"];
157--646[label="0.133333;4pkt 4fpkt"];
157--696[label="0.875;21pkt 21fpkt"];
646--864[label="0.0363636;2pkt 2fpkt"];
646--882[label="0.0363636;2pkt 2fpkt"];
646--899[label="0.0363636;2pkt 2fpkt"];
646--952[label="0.6;33pkt 33fpkt"];
646--1325[label="0.0789474;3pkt 3fpkt"];
646--1358[label="0.181818;2pkt 2fpkt"];
646--1375[label="0.2;5pkt 5fpkt"];
646--1707[label="0.0789474;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.144.46" src_ip="198.167.3.15" src_port="80"/>
      <filter dst_ip="155.59.233.17" src_ip="197.0.196.207" src_port="80"/>
    </slice>
    <from sec="989039018" usec="0"/>
    <to sec="989039500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
137[label="157.96.95.44;d;79pkt 79fpkt", shape=diamond, color=yellow];
687[label="223.46.12.130;s;19pkt 19fpkt", shape=diamond, color=yellow];
1200[label="223.46.12.130;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1335[label="216.48.36.193;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1633[label="223.46.12.130;1pkt 1fpkt", shape=invtriangle, color=brown];
1712[label="216.48.36.193;4pkt 4fpkt", shape=invtriangle, color=brown];
1866[label="223.46.12.130;1pkt 1fpkt", shape=invhouse, color=bisque];
1913[label="216.48.36.193;3pkt 3fpkt", shape=invhouse, color=bisque];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.46.12.130:*, 157.96.95.44:80}[25.3165%]&lt;BR/&gt;{216.57.0.87:*, 157.96.95.44:80}[20.2532%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5536%)&lt;BR/&gt; 10647: (2.23214%)&lt;BR/&gt; 4039: (1.78571%)&lt;BR/&gt; 4038: (1.78571%)&lt;BR/&gt; 4037: (1.78571%)&gt;];
}
137--140[label="1;5pkt 5fpkt"];
137--645[label="1;9pkt 9fpkt"];
137--687[label="1;19pkt 19fpkt"];
137--872[label="0.0506329;4pkt 4fpkt"];
137--884[label="0.0886076;7pkt 7fpkt"];
137--889[label="0.0506329;4pkt 4fpkt"];
137--901[label="0.0886076;7pkt 7fpkt"];
137--905[label="0.0506329;4pkt 4fpkt"];
137--1200[label="1;1pkt 1fpkt"];
137--1335[label="1;4pkt 4fpkt"];
137--1633[label="1;1pkt 1fpkt"];
137--1634[label="1;8pkt 8fpkt"];
137--1712[label="1;4pkt 4fpkt"];
137--1866[label="1;1pkt 1fpkt"];
137--1913[label="1;3pkt 3fpkt"];
687--884[label="0.105263;2pkt 2fpkt"];
687--901[label="0.105263;2pkt 2fpkt"];
687--1200[label="1;1pkt 1fpkt"];
687--1633[label="1;1pkt 1fpkt"];
687--1866[label="1;1pkt 1fpkt"];
1200--1633[label="1;1pkt 1fpkt"];
1200--1866[label="1;1pkt 1fpkt"];
1335--1712[label="1;4pkt 4fpkt"];
1335--1913[label="1;3pkt 3fpkt"];
1633--1866[label="1;1pkt 1fpkt"];
1712--1913[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="157.96.95.44" dst_port="80" src_ip="223.46.12.130"/>
      <filter dst_ip="157.96.95.44" dst_port="80" src_ip="216.57.0.87"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
663[label="197.200.139.166;d;8pkt 8fpkt", shape=diamond, color=yellow];
664[label="217.22.127.65;s;8pkt 8fpkt", shape=diamond, color=yellow];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.22.127.65:0, *:0}[53.3333%]&lt;BR/&gt;{*:111, 197.200.139.166:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (62.5%)&lt;BR/&gt; 111: (18.75%)&lt;BR/&gt; 52698: (3.125%)&lt;BR/&gt; 50665: (3.125%)&lt;BR/&gt; 48633: (3.125%)&gt;];
}
663--664[label="0.125;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.200.139.166" src_port="111"/>
      <filter src_ip="217.22.127.65"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="220.19.116.241"/>
      <from sec="989039030" usec="0"/>
      <to sec="989039538" usec="0"/>
    </slice>
    <from sec="989039030" usec="0"/>
    <to sec="989039538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="70.85.178.229"/>
      <from sec="989039237" usec="0"/>
      <to sec="989039605" usec="0"/>
    </slice>
    <from sec="989039237" usec="0"/>
    <to sec="989039605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
481[label="160.90.43.211;s;21pkt 21fpkt", shape=diamond, color=yellow];
695[label="102.69.10.33;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.90.43.211:*, 102.169.68.148:80}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1420: (4.54545%)&lt;BR/&gt; 1435: (2.27273%)&lt;BR/&gt; 1434: (2.27273%)&lt;BR/&gt; 1433: (2.27273%)&gt;];
}
481--579[label="1;1pkt 1fpkt"];
481--695[label="1;1pkt 1fpkt"];
481--872[label="0.047619;1pkt 1fpkt"];
481--884[label="0.142857;3pkt 3fpkt"];
481--889[label="0.047619;1pkt 1fpkt"];
481--901[label="0.142857;3pkt 3fpkt"];
481--905[label="0.047619;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="102.169.68.148" dst_port="80" src_ip="160.90.43.211"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
565[label="200.46.69.98;d;196pkt 196fpkt", shape=diamond, color=yellow];
698[label="155.59.177.28;s;67pkt 67fpkt", shape=diamond, color=yellow];
704[label="200.96.115.119;d;16pkt 16fpkt", shape=diamond, color=yellow];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.168.123.78:*, 200.46.69.98:10000}[57.6923%]&lt;BR/&gt;{155.59.177.28:*, *:80}[23.8462%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10000: (35.8423%)&lt;BR/&gt; 80: (14.1577%)&lt;BR/&gt; 3756: (0.358423%)&lt;BR/&gt; 3755: (0.358423%)&lt;BR/&gt; 3754: (0.358423%)&gt;];
}
565--698[label="0.0447761;3pkt 3fpkt"];
565--797[label="0.433673;85pkt 85fpkt"];
565--964[label="0.0204082;4pkt 4fpkt"];
565--1215[label="0.201183;34pkt 34fpkt"];
698--704[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="155.59.177.28"/>
      <filter dst_ip="200.46.69.98" dst_port="10000" src_ip="216.168.123.78"/>
    </slice>
    <from sec="989038809" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="200.222.19.73"/>
      <from sec="989039458" usec="0"/>
      <to sec="989039537" usec="0"/>
    </slice>
    <from sec="989039458" usec="0"/>
    <to sec="989039537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
107[label="217.22.126.235;d;143pkt 143fpkt", shape=diamond, color=yellow];
714[label="25.129.121.244;s;2pkt 2fpkt", shape=diamond, color=yellow];
1169[label="197.72.202.112;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1373[label="196.87.0.207;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1618[label="197.72.202.112;1pkt 1fpkt", shape=invtriangle, color=brown];
1857[label="197.72.202.112;1pkt 1fpkt", shape=invhouse, color=bisque];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 217.22.126.235:6667}[39.8601%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (20.4698%)&lt;BR/&gt; 113: (5.7047%)&lt;BR/&gt; 0: (4.69799%)&lt;BR/&gt; 6668: (4.36242%)&lt;BR/&gt; 6666: (3.69128%)&gt;];
}
107--714[label="1;2pkt 2fpkt"];
107--1169[label="1;1pkt 1fpkt"];
107--1373[label="1;1pkt 1fpkt"];
107--1618[label="1;1pkt 1fpkt"];
107--1857[label="1;1pkt 1fpkt"];
1169--1618[label="1;1pkt 1fpkt"];
1169--1857[label="1;1pkt 1fpkt"];
1618--1857[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.22.126.235" dst_port="6667"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="160.90.40.158"/>
      <from sec="989038801" usec="0"/>
      <to sec="989039628" usec="0"/>
    </slice>
    <from sec="989038801" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="160.90.190.29"/>
      <from sec="989039371" usec="0"/>
      <to sec="989039628" usec="0"/>
    </slice>
    <from sec="989039371" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
104[label="25.9.91.106;s;1pkt 1fpkt", shape=diamond, color=yellow];
105[label="130.202.210.75;d;1pkt 1fpkt", shape=diamond, color=yellow];
767[label="25.9.91.106;s;1pkt 1fpkt", shape=hexagon, color=black];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.9.91.106:16820, 130.202.210.75:1026}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16820: (50%)&lt;BR/&gt; 1026: (50%)&gt;];
}
104--105[label="1;1pkt 1fpkt"];
104--767[label="1;1pkt 1fpkt"];
105--767[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.210.75" dst_port="1026" src_ip="25.9.91.106" src_port="16820"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
89[label="199.61.34.207;s;1pkt 1fpkt", shape=diamond, color=yellow];
771[label="199.61.34.207;s;1pkt 1fpkt", shape=hexagon, color=black];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.61.34.207:64991, 217.22.121.166:6346}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64991: (50%)&lt;BR/&gt; 6346: (50%)&gt;];
}
89--771[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.22.121.166" dst_port="6346" src_ip="199.61.34.207" src_port="64991"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
146[label="217.22.123.58;s;103pkt 103fpkt", shape=diamond, color=yellow];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.22.123.58:*, 200.46.20.248:80}[83.4951%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55234: (0.485437%)&lt;BR/&gt; 55233: (0.485437%)&lt;BR/&gt; 55223: (0.485437%)&lt;BR/&gt; 55222: (0.485437%)&gt;];
}
146--165[label="0.834951;86pkt 86fpkt"];
146--615[label="1;1pkt 1fpkt"];
146--774[label="1;41pkt 41fpkt"];
146--872[label="0.0776699;8pkt 8fpkt"];
146--884[label="0.0970874;10pkt 10fpkt"];
146--889[label="0.0776699;8pkt 8fpkt"];
146--901[label="0.0970874;10pkt 10fpkt"];
146--905[label="0.0776699;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="200.46.20.248" dst_port="80" src_ip="217.22.123.58"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.79134,1.69321,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
290[label="220.160.93.7;s;9pkt 9fpkt", shape=diamond, color=yellow];
498[label="157.96.200.115;d;35pkt 35fpkt", shape=diamond, color=yellow];
776[label="220.160.93.7;s;9pkt 9fpkt", shape=hexagon, color=black];
933[label="220.160.93.7;9pkt 9fpkt", shape=pentagon, color=darkviolet];
1032[label="220.182.213.43;28pkt 28fpkt", shape=pentagon, color=darkviolet];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.182.213.43:80, 157.96.200.115:*}[56.8627%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4444%)&lt;BR/&gt; 1191: (2.22222%)&lt;BR/&gt; 1190: (2.22222%)&lt;BR/&gt; 1189: (2.22222%)&lt;BR/&gt; 1188: (2.22222%)&gt;];
}
290--498[label="1;9pkt 9fpkt"];
290--776[label="1;9pkt 9fpkt"];
290--933[label="1;9pkt 9fpkt"];
498--561[label="0.285714;10pkt 10fpkt"];
498--776[label="1;9pkt 9fpkt"];
498--799[label="0.285714;10pkt 10fpkt"];
498--933[label="1;9pkt 9fpkt"];
498--1032[label="0.428571;12pkt 12fpkt"];
776--933[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="157.96.200.115" src_ip="220.182.213.43" src_port="80"/>
    </slice>
    <from sec="989038806" usec="0"/>
    <to sec="989039640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
79[label="70.54.60.115;s;1pkt 1fpkt", shape=diamond, color=yellow];
779[label="70.54.60.115;s;1pkt 1fpkt", shape=hexagon, color=black];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.54.60.115:6346, 155.59.208.17:26119}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26119: (50%)&lt;BR/&gt; 6346: (50%)&gt;];
}
79--779[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.59.208.17" dst_port="26119" src_ip="70.54.60.115" src_port="6346"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
370[label="220.83.243.232;s;101pkt 101fpkt", shape=diamond, color=yellow];
784[label="220.83.243.232;s;101pkt 101fpkt", shape=hexagon, color=black];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.83.243.232:80, 157.96.193.172:*}[72.2772%]&lt;BR/&gt;{220.83.243.232:80, 160.90.190.26:*}[25.7426%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65389: (0.49505%)&lt;BR/&gt; 65388: (0.49505%)&lt;BR/&gt; 65387: (0.49505%)&lt;BR/&gt; 65386: (0.49505%)&gt;];
}
370--784[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_ip="157.96.193.172" src_ip="220.83.243.232" src_port="80"/>
      <filter dst_ip="160.90.190.26" src_ip="220.83.243.232" src_port="80"/>
    </slice>
    <from sec="989038825" usec="0"/>
    <to sec="989039070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
447[label="155.59.249.186;d;114pkt 114fpkt", shape=diamond, color=yellow];
785[label="217.57.208.32;s;114pkt 114fpkt", shape=hexagon, color=black];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.57.208.32:80, 155.59.249.186:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49392: (0.438596%)&lt;BR/&gt; 49391: (0.438596%)&lt;BR/&gt; 49390: (0.438596%)&lt;BR/&gt; 49389: (0.438596%)&gt;];
}
447--448[label="1;114pkt 114fpkt"];
447--785[label="1;114pkt 114fpkt"];
447--864[label="0.0877193;10pkt 10fpkt"];
447--882[label="0.0877193;10pkt 10fpkt"];
447--899[label="0.0877193;10pkt 10fpkt"];
785--864[label="0.0877193;10pkt 10fpkt"];
785--882[label="0.0877193;10pkt 10fpkt"];
785--899[label="0.0877193;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="155.59.249.186" src_ip="217.57.208.32" src_port="80"/>
    </slice>
    <from sec="989039048" usec="0"/>
    <to sec="989039139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
459[label="167.223.17.193;s;57pkt 57fpkt", shape=diamond, color=yellow];
526[label="219.149.40.218;d;21pkt 21fpkt", shape=diamond, color=yellow];
790[label="167.223.17.193;s;47pkt 47fpkt", shape=hexagon, color=black];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.223.17.193:80, 219.149.40.218:*}[52.6316%]&lt;BR/&gt;{167.223.17.193:1024, *:53}[24.5614%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.4%)&lt;BR/&gt; 1024: (11.2%)&lt;BR/&gt; 53: (11.2%)&lt;BR/&gt; 0: (4.8%)&lt;BR/&gt; 1657: (1.2%)&gt;];
}
459--526[label="1;21pkt 21fpkt"];
459--790[label="1;47pkt 47fpkt"];
459--864[label="0.122807;7pkt 7fpkt"];
459--882[label="0.122807;7pkt 7fpkt"];
459--899[label="0.122807;7pkt 7fpkt"];
526--790[label="1;21pkt 21fpkt"];
526--864[label="0.238095;5pkt 5fpkt"];
526--882[label="0.238095;5pkt 5fpkt"];
526--899[label="0.238095;5pkt 5fpkt"];
790--864[label="0.148936;7pkt 7fpkt"];
790--882[label="0.148936;7pkt 7fpkt"];
790--899[label="0.148936;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="219.149.40.218" src_ip="167.223.17.193" src_port="80"/>
      <filter dst_port="53" src_ip="167.223.17.193" src_port="1024"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
266[label="150.244.103.26;s;1pkt 1fpkt", shape=diamond, color=yellow];
794[label="150.244.103.26;s;1pkt 1fpkt", shape=hexagon, color=black];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.244.103.26:6347, 160.90.184.230:2864}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6347: (50%)&lt;BR/&gt; 2864: (50%)&gt;];
}
266--794[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.90.184.230" dst_port="2864" src_ip="150.244.103.26" src_port="6347"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.859655,1.69398,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
186[label="26.215.198.87;s;1pkt 1fpkt", shape=diamond, color=yellow];
200[label="70.208.141.149;s;1pkt 1fpkt", shape=diamond, color=yellow];
217[label="70.101.224.245;s;1pkt 1fpkt", shape=diamond, color=yellow];
241[label="70.236.212.213;s;1pkt 1fpkt", shape=diamond, color=yellow];
252[label="26.130.13.41;s;1pkt 1fpkt", shape=diamond, color=yellow];
257[label="192.83.30.6;s;1pkt 1fpkt", shape=diamond, color=yellow];
268[label="102.26.66.84;s;1pkt 1fpkt", shape=diamond, color=yellow];
296[label="160.90.43.229;d;23pkt 23fpkt", shape=diamond, color=yellow];
297[label="70.44.6.125;s;1pkt 1fpkt", shape=diamond, color=yellow];
317[label="70.70.232.255;s;1pkt 1fpkt", shape=diamond, color=yellow];
340[label="198.204.249.176;s;1pkt 1fpkt", shape=diamond, color=yellow];
381[label="102.175.99.222;s;1pkt 1fpkt", shape=diamond, color=yellow];
395[label="102.108.93.198;s;1pkt 1fpkt", shape=diamond, color=yellow];
436[label="70.196.201.135;s;1pkt 1fpkt", shape=diamond, color=yellow];
470[label="147.76.138.245;s;1pkt 1fpkt", shape=diamond, color=yellow];
782[label="26.130.13.41;s;1pkt 1fpkt", shape=hexagon, color=black];
800[label="160.90.43.229;d;22pkt 22fpkt", shape=hexagon, color=black];
1299[label="198.204.249.176;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1348[label="102.108.93.198;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1695[label="198.204.249.176;1pkt 1fpkt", shape=invtriangle, color=brown];
1742[label="70.236.212.213;1pkt 1fpkt", shape=invtriangle, color=brown];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6346, 160.90.43.229:*}[86.9565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (46.0938%)&lt;BR/&gt; 2318: (3.90625%)&lt;BR/&gt; 6347: (3.125%)&lt;BR/&gt; 2732: (3.125%)&lt;BR/&gt; 2729: (3.125%)&gt;];
}
186--296[label="1;1pkt 1fpkt"];
186--800[label="1;1pkt 1fpkt"];
200--296[label="1;1pkt 1fpkt"];
200--800[label="1;1pkt 1fpkt"];
217--296[label="1;1pkt 1fpkt"];
217--800[label="1;1pkt 1fpkt"];
241--296[label="1;1pkt 1fpkt"];
241--800[label="1;1pkt 1fpkt"];
241--1742[label="1;1pkt 1fpkt"];
252--296[label="1;1pkt 1fpkt"];
252--782[label="1;1pkt 1fpkt"];
252--800[label="1;1pkt 1fpkt"];
257--296[label="1;1pkt 1fpkt"];
257--800[label="1;1pkt 1fpkt"];
268--296[label="1;1pkt 1fpkt"];
268--800[label="1;1pkt 1fpkt"];
296--297[label="1;1pkt 1fpkt"];
296--317[label="1;1pkt 1fpkt"];
296--340[label="1;1pkt 1fpkt"];
296--381[label="1;1pkt 1fpkt"];
296--395[label="1;1pkt 1fpkt"];
296--436[label="1;1pkt 1fpkt"];
296--470[label="1;1pkt 1fpkt"];
296--782[label="1;1pkt 1fpkt"];
296--800[label="1;22pkt 22fpkt"];
296--1210[label="0.0434783;1pkt 1fpkt"];
296--1299[label="1;1pkt 1fpkt"];
296--1348[label="1;1pkt 1fpkt"];
296--1695[label="1;1pkt 1fpkt"];
296--1742[label="1;1pkt 1fpkt"];
297--800[label="1;1pkt 1fpkt"];
317--800[label="1;1pkt 1fpkt"];
340--800[label="1;1pkt 1fpkt"];
340--1299[label="1;1pkt 1fpkt"];
340--1695[label="1;1pkt 1fpkt"];
381--800[label="1;1pkt 1fpkt"];
395--800[label="1;1pkt 1fpkt"];
395--1348[label="1;1pkt 1fpkt"];
436--800[label="1;1pkt 1fpkt"];
470--800[label="1;1pkt 1fpkt"];
782--800[label="1;1pkt 1fpkt"];
800--1299[label="1;1pkt 1fpkt"];
800--1348[label="1;1pkt 1fpkt"];
800--1695[label="1;1pkt 1fpkt"];
800--1742[label="1;1pkt 1fpkt"];
1299--1695[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.90.43.229" src_port="6346"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
69[label="167.223.33.137;s;19pkt 19fpkt", shape=diamond, color=yellow];
303[label="220.62.169.233;d;3pkt 3fpkt", shape=diamond, color=yellow];
440[label="193.198.208.206;d;8pkt 8fpkt", shape=diamond, color=yellow];
801[label="167.223.33.137;s;15pkt 15fpkt", shape=hexagon, color=black];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.223.33.137:21, 193.198.208.206:*}[42.1053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (42.2222%)&lt;BR/&gt; 64517: (3.33333%)&lt;BR/&gt; 64504: (3.33333%)&lt;BR/&gt; 63050: (3.33333%)&lt;BR/&gt; 62676: (3.33333%)&gt;];
}
69--303[label="1;3pkt 3fpkt"];
69--440[label="1;8pkt 8fpkt"];
69--801[label="1;15pkt 15fpkt"];
303--801[label="1;3pkt 3fpkt"];
440--801[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="193.198.208.206" src_ip="167.223.33.137" src_port="21"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
305[label="24.90.247.161;s;1pkt 1fpkt", shape=diamond, color=yellow];
803[label="24.90.247.161;s;1pkt 1fpkt", shape=hexagon, color=black];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.90.247.161:22944, 217.22.121.166:6346}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22944: (50%)&lt;BR/&gt; 6346: (50%)&gt;];
}
305--803[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.22.121.166" dst_port="6346" src_ip="24.90.247.161" src_port="22944"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
315[label="198.21.228.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
809[label="198.21.228.5;s;1pkt 1fpkt", shape=hexagon, color=black];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.21.228.5:2354, 217.22.121.166:6346}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 2354: (50%)&gt;];
}
315--809[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.22.121.166" dst_port="6346" src_ip="198.21.228.5" src_port="2354"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
329[label="209.1.50.64;s;1pkt 1fpkt", shape=diamond, color=yellow];
810[label="209.1.50.64;s;1pkt 1fpkt", shape=hexagon, color=black];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.1.50.64:63805, 217.22.121.166:6346}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63805: (50%)&lt;BR/&gt; 6346: (50%)&gt;];
}
329--810[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.22.121.166" dst_port="6346" src_ip="209.1.50.64" src_port="63805"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
604[label="137.141.88.135;s;1pkt 1fpkt", shape=diamond, color=yellow];
811[label="137.141.88.135;s;1pkt 1fpkt", shape=hexagon, color=black];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.141.88.135:2514, 217.22.121.166:6346}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 2514: (50%)&gt;];
}
604--811[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.22.121.166" dst_port="6346" src_ip="137.141.88.135" src_port="2514"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
406[label="24.46.146.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
606[label="155.59.129.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
813[label="155.59.129.227;s;1pkt 1fpkt", shape=hexagon, color=black];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.59.129.227:1044, 24.46.146.74:1214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 1044: (50%)&gt;];
}
406--606[label="1;1pkt 1fpkt"];
406--813[label="1;1pkt 1fpkt"];
606--813[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="24.46.146.74" dst_port="1214" src_ip="155.59.129.227" src_port="1044"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
348[label="216.202.23.124;s;1pkt 1fpkt", shape=diamond, color=yellow];
819[label="216.202.23.124;s;1pkt 1fpkt", shape=hexagon, color=black];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.202.23.124:3130, 167.223.132.19:3130}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3130: (100%)&gt;];
}
348--819[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.132.19" dst_port="3130" src_ip="216.202.23.124" src_port="3130"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
684[label="130.202.250.103;d;16pkt 16fpkt", shape=diamond, color=yellow];
832[label="220.83.202.235;s;14pkt 14fpkt", shape=hexagon, color=black];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.78.153.249:80, 130.202.250.103:*}[24%]&lt;BR/&gt;{220.83.202.235:80, 130.202.250.103:*}[24%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1131: (3.33333%)&lt;BR/&gt; 1129: (3.33333%)&lt;BR/&gt; 1107: (3.33333%)&lt;BR/&gt; 1104: (3.33333%)&gt;];
}
684--832[label="0.357143;5pkt 5fpkt"];
832--864[label="0.142857;2pkt 2fpkt"];
832--882[label="0.142857;2pkt 2fpkt"];
832--899[label="0.142857;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.250.103" src_ip="220.83.202.235" src_port="80"/>
      <filter dst_ip="130.202.250.103" src_ip="197.78.153.249" src_port="80"/>
    </slice>
    <from sec="989038826" usec="0"/>
    <to sec="989039519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
390[label="155.59.169.152;s;16pkt 16fpkt", shape=diamond, color=yellow];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.59.169.152:80, 102.247.84.108:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.875%)&lt;BR/&gt; 0: (6.25%)&lt;BR/&gt; 65456: (3.125%)&lt;BR/&gt; 64973: (3.125%)&lt;BR/&gt; 63536: (3.125%)&gt;];
}
390--449[label="1;7pkt 7fpkt"];
390--835[label="1;7pkt 7fpkt"];
390--864[label="0.375;6pkt 6fpkt"];
390--882[label="0.375;6pkt 6fpkt"];
390--899[label="0.375;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="102.247.84.108" src_ip="155.59.169.152" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835988,1.7313,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
588[label="142.57.180.68;d;3pkt 3fpkt", shape=diamond, color=yellow];
640[label="216.122.28.76;s;205pkt 205fpkt", shape=diamond, color=yellow];
830[label="216.122.28.76;s;143pkt 143fpkt", shape=hexagon, color=black];
837[label="142.57.180.68;d;3pkt 3fpkt", shape=hexagon, color=black];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.122.28.76:80, 217.55.242.173:*}[83.5749%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.1977%)&lt;BR/&gt; 53: (5.64972%)&lt;BR/&gt; 32775: (2.11864%)&lt;BR/&gt; 48864: (0.564972%)&lt;BR/&gt; 64957: (0.282486%)&gt;];
}
588--640[label="0.333333;1pkt 1fpkt"];
588--830[label="0.333333;1pkt 1fpkt"];
588--837[label="1;3pkt 3fpkt"];
640--830[label="1;143pkt 143fpkt"];
640--837[label="0.333333;1pkt 1fpkt"];
640--864[label="0.0195122;4pkt 4fpkt"];
640--870[label="0.00487805;1pkt 1fpkt"];
640--871[label="0.0097561;2pkt 2fpkt"];
640--876[label="0.00487805;1pkt 1fpkt"];
640--882[label="0.0195122;4pkt 4fpkt"];
640--887[label="0.00487805;1pkt 1fpkt"];
640--888[label="0.0097561;2pkt 2fpkt"];
640--893[label="0.00487805;1pkt 1fpkt"];
640--899[label="0.0195122;4pkt 4fpkt"];
640--903[label="0.00487805;1pkt 1fpkt"];
640--904[label="0.0097561;2pkt 2fpkt"];
640--909[label="0.00487805;1pkt 1fpkt"];
830--837[label="0.333333;1pkt 1fpkt"];
830--864[label="0.027972;4pkt 4fpkt"];
830--870[label="0.00699301;1pkt 1fpkt"];
830--871[label="0.013986;2pkt 2fpkt"];
830--876[label="0.00699301;1pkt 1fpkt"];
830--882[label="0.027972;4pkt 4fpkt"];
830--887[label="0.00699301;1pkt 1fpkt"];
830--888[label="0.013986;2pkt 2fpkt"];
830--893[label="0.00699301;1pkt 1fpkt"];
830--899[label="0.027972;4pkt 4fpkt"];
830--903[label="0.00699301;1pkt 1fpkt"];
830--904[label="0.013986;2pkt 2fpkt"];
830--909[label="0.00699301;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.55.242.173" src_ip="216.122.28.76" src_port="80"/>
    </slice>
    <from sec="989038824" usec="0"/>
    <to sec="989039625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.859655,1.69398,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
653[label="217.241.48.120;s;39pkt 39fpkt", shape=diamond, color=yellow];
840[label="217.241.48.120;s;38pkt 38fpkt", shape=hexagon, color=black];
1178[label="217.241.48.120;39pkt 39fpkt", shape=pentagon, color=darkviolet];
1622[label="217.241.48.120;39pkt 39fpkt", shape=invtriangle, color=brown];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.241.48.120:80, 216.115.217.19:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47021: (1.29032%)&lt;BR/&gt; 47009: (1.29032%)&lt;BR/&gt; 47008: (1.29032%)&lt;BR/&gt; 47007: (1.29032%)&gt;];
}
653--840[label="1;38pkt 38fpkt"];
653--1178[label="1;39pkt 39fpkt"];
653--1622[label="1;39pkt 39fpkt"];
840--1178[label="1;38pkt 38fpkt"];
840--1622[label="1;38pkt 38fpkt"];
1178--1622[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="216.115.217.19" src_ip="217.241.48.120" src_port="80"/>
    </slice>
    <from sec="989039365" usec="0"/>
    <to sec="989039572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00365,1.69547,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
138[label="157.96.95.44;s;16pkt 16fpkt", shape=diamond, color=yellow];
139[label="216.21.15.66;d;4pkt 4fpkt", shape=diamond, color=yellow];
842[label="157.96.95.44;s;14pkt 14fpkt", shape=hexagon, color=black];
1033[label="157.96.95.44;16pkt 16fpkt", shape=pentagon, color=darkviolet];
1545[label="157.96.95.44;15pkt 15fpkt", shape=invtriangle, color=brown];
1814[label="157.96.95.44;15pkt 15fpkt", shape=invhouse, color=bisque];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.96.95.44:80, 216.17.72.171:*}[37.5%]&lt;BR/&gt;{157.96.95.44:80, 216.21.15.66:*}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2454: (3.75%)&lt;BR/&gt; 2453: (3.75%)&lt;BR/&gt; 2452: (3.75%)&lt;BR/&gt; 2353: (3.75%)&gt;];
}
138--139[label="1;4pkt 4fpkt"];
138--842[label="1;14pkt 14fpkt"];
138--864[label="0.25;4pkt 4fpkt"];
138--882[label="0.25;4pkt 4fpkt"];
138--899[label="0.25;4pkt 4fpkt"];
138--1033[label="1;16pkt 16fpkt"];
138--1545[label="1;15pkt 15fpkt"];
138--1814[label="1;15pkt 15fpkt"];
139--842[label="1;4pkt 4fpkt"];
139--864[label="1;4pkt 4fpkt"];
139--882[label="1;4pkt 4fpkt"];
139--899[label="1;4pkt 4fpkt"];
139--1033[label="1;4pkt 4fpkt"];
139--1545[label="1;4pkt 4fpkt"];
139--1814[label="1;4pkt 4fpkt"];
842--864[label="0.285714;4pkt 4fpkt"];
842--882[label="0.285714;4pkt 4fpkt"];
842--899[label="0.285714;4pkt 4fpkt"];
842--1033[label="1;14pkt 14fpkt"];
842--1545[label="0.928571;13pkt 13fpkt"];
842--1814[label="0.928571;13pkt 13fpkt"];
1033--1545[label="1;15pkt 15fpkt"];
1033--1814[label="1;15pkt 15fpkt"];
1545--1814[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="216.17.72.171" src_ip="157.96.95.44" src_port="80"/>
      <filter dst_ip="216.21.15.66" src_ip="157.96.95.44" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
499[label="223.59.107.75;d;34pkt 34fpkt", shape=diamond, color=yellow];
553[label="197.35.190.235;s;124pkt 124fpkt", shape=diamond, color=yellow];
614[label="155.59.196.1;s;244pkt 244fpkt", shape=diamond, color=yellow];
1080[label="217.22.126.69;8pkt 8fpkt", shape=pentagon, color=darkviolet];
1096[label="157.96.196.78;56pkt 56fpkt", shape=pentagon, color=darkviolet];
1138[label="216.168.91.96;48pkt 48fpkt", shape=pentagon, color=darkviolet];
1259[label="157.1.224.160;82pkt 82fpkt", shape=pentagon, color=darkviolet];
1296[label="217.22.127.176;24pkt 24fpkt", shape=pentagon, color=darkviolet];
1385[label="216.168.80.210;19pkt 19fpkt", shape=pentagon, color=darkviolet];
1454[label="197.35.190.235;128pkt 128fpkt", shape=pentagon, color=darkviolet];
1676[label="157.1.224.160;82pkt 82fpkt", shape=invtriangle, color=brown];
1889[label="157.1.224.160;81pkt 81fpkt", shape=invhouse, color=bisque];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.59.196.1:53, *:53}[22.0126%]&lt;BR/&gt;{197.35.190.235:0, *:0}[20.1258%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (47.6344%)&lt;BR/&gt; 53: (32.8495%)&lt;BR/&gt; 4803: (6.23656%)&lt;BR/&gt; 80: (0.806452%)&lt;BR/&gt; 1024: (0.268817%)&gt;];
}
499--553[label="0.0294118;1pkt 1fpkt"];
499--614[label="0.0294118;1pkt 1fpkt"];
499--657[label="0.0294118;1pkt 1fpkt"];
499--818[label="0.0294118;1pkt 1fpkt"];
499--1080[label="0.125;1pkt 1fpkt"];
499--1096[label="0.0294118;1pkt 1fpkt"];
499--1138[label="0.0294118;1pkt 1fpkt"];
499--1235[label="0.0909091;1pkt 1fpkt"];
499--1259[label="0.0294118;1pkt 1fpkt"];
499--1296[label="0.0416667;1pkt 1fpkt"];
499--1385[label="0.0526316;1pkt 1fpkt"];
499--1423[label="0.0294118;1pkt 1fpkt"];
499--1454[label="0.0294118;1pkt 1fpkt"];
499--1658[label="0.0909091;1pkt 1fpkt"];
499--1676[label="0.0294118;1pkt 1fpkt"];
499--1879[label="0.0833333;1pkt 1fpkt"];
499--1889[label="0.0294118;1pkt 1fpkt"];
553--605[label="0.0263158;1pkt 1fpkt"];
553--1454[label="0.991935;123pkt 123fpkt"];
614--818[label="1;204pkt 204fpkt"];
614--870[label="0.0983607;24pkt 24fpkt"];
614--871[label="0.0819672;20pkt 20fpkt"];
614--876[label="0.0901639;22pkt 22fpkt"];
614--887[label="0.0983607;24pkt 24fpkt"];
614--888[label="0.0819672;20pkt 20fpkt"];
614--893[label="0.0901639;22pkt 22fpkt"];
614--903[label="0.0983607;24pkt 24fpkt"];
614--904[label="0.0819672;20pkt 20fpkt"];
614--909[label="0.0901639;22pkt 22fpkt"];
1259--1676[label="1;82pkt 82fpkt"];
1259--1889[label="1;81pkt 81fpkt"];
1676--1889[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="155.59.196.1" src_port="53"/>
      <filter src_ip="197.35.190.235"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
540[label="167.223.10.158;d;80pkt 80fpkt", shape=diamond, color=yellow];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 167.223.10.158:25}[52.5%]&lt;BR/&gt;{*:113, 167.223.10.158:*}[26.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (26.25%)&lt;BR/&gt; 113: (13.125%)&lt;BR/&gt; 80: (8.75%)&lt;BR/&gt; 1867: (1.25%)&lt;BR/&gt; 0: (1.25%)&gt;];
}
540--554[label="0.0125;1pkt 1fpkt"];
540--555[label="0.117647;6pkt 6fpkt"];
540--560[label="0.0375;3pkt 3fpkt"];
540--611[label="0.0133333;1pkt 1fpkt"];
540--683[label="0.0377358;2pkt 2fpkt"];
540--721[label="0.0833333;4pkt 4fpkt"];
540--792[label="0.030303;1pkt 1fpkt"];
540--816[label="1;74pkt 74fpkt"];
540--824[label="0.0125;1pkt 1fpkt"];
540--843[label="0.025;2pkt 2fpkt"];
540--872[label="0.05;4pkt 4fpkt"];
540--875[label="0.1375;11pkt 11fpkt"];
540--884[label="0.025;2pkt 2fpkt"];
540--889[label="0.05;4pkt 4fpkt"];
540--892[label="0.1375;11pkt 11fpkt"];
540--901[label="0.025;2pkt 2fpkt"];
540--905[label="0.05;4pkt 4fpkt"];
540--908[label="0.1375;11pkt 11fpkt"];
540--1059[label="0.0882353;6pkt 6fpkt"];
540--1075[label="0.027027;1pkt 1fpkt"];
540--1142[label="0.12;6pkt 6fpkt"];
540--1355[label="0.05;1pkt 1fpkt"];
540--1369[label="0.0625;2pkt 2fpkt"];
540--1561[label="0.0882353;6pkt 6fpkt"];
540--1573[label="0.027027;1pkt 1fpkt"];
540--1606[label="0.12;6pkt 6fpkt"];
540--1722[label="0.05;1pkt 1fpkt"];
540--1729[label="0.0645161;2pkt 2fpkt"];
540--1833[label="0.0263158;1pkt 1fpkt"];
540--1918[label="0.05;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.10.158" src_port="113"/>
      <filter dst_ip="167.223.10.158" dst_port="25"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
438[label="217.198.171.182;s;70pkt 70fpkt", shape=diamond, color=yellow];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.198.171.182:*, 155.59.32.220:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53482: (0.714286%)&lt;BR/&gt; 53418: (0.714286%)&lt;BR/&gt; 52753: (0.714286%)&lt;BR/&gt; 51125: (0.714286%)&gt;];
}
438--627[label="1;70pkt 70fpkt"];
438--884[label="0.0285714;2pkt 2fpkt"];
438--901[label="0.0285714;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="155.59.32.220" dst_port="80" src_ip="217.198.171.182"/>
    </slice>
    <from sec="989039006" usec="0"/>
    <to sec="989039116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.820289,1.75908,999,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
478[label="157.96.193.27;d;421pkt 421fpkt", shape=diamond, color=yellow];
1568[label="208.219.25.62;31pkt 31fpkt", shape=invtriangle, color=brown];
1738[label="198.207.29.210;5pkt 5fpkt", shape=invtriangle, color=brown];
1928[label="198.207.29.210;5pkt 5fpkt", shape=invhouse, color=bisque];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 157.96.193.27:35441}[53.1868%]&lt;BR/&gt;{*:*, 157.96.193.27:53}[36.7033%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.4589%)&lt;BR/&gt; 35441: (26.1905%)&lt;BR/&gt; 0: (2.1645%)&lt;BR/&gt; 113: (1.51515%)&lt;BR/&gt; 25: (1.51515%)&gt;];
}
478--494[label="0.0285714;1pkt 1fpkt"];
478--496[label="0.0333333;1pkt 1fpkt"];
478--557[label="0.0118765;5pkt 5fpkt"];
478--722[label="0.05;1pkt 1fpkt"];
478--826[label="0.0344828;1pkt 1fpkt"];
478--870[label="0.0190024;8pkt 8fpkt"];
478--871[label="0.0427553;18pkt 18fpkt"];
478--876[label="0.0261283;11pkt 11fpkt"];
478--887[label="0.0190024;8pkt 8fpkt"];
478--888[label="0.0427553;18pkt 18fpkt"];
478--893[label="0.0261283;11pkt 11fpkt"];
478--903[label="0.0190024;8pkt 8fpkt"];
478--904[label="0.0427553;18pkt 18fpkt"];
478--909[label="0.0261283;11pkt 11fpkt"];
478--951[label="0.0232558;1pkt 1fpkt"];
478--969[label="0.0119048;1pkt 1fpkt"];
478--971[label="0.0344828;1pkt 1fpkt"];
478--1002[label="0.2;1pkt 1fpkt"];
478--1012[label="0.153846;2pkt 2fpkt"];
478--1034[label="0.0113636;1pkt 1fpkt"];
478--1042[label="0.0277778;1pkt 1fpkt"];
478--1053[label="0.0217391;1pkt 1fpkt"];
478--1104[label="0.0166667;1pkt 1fpkt"];
478--1150[label="0.00884956;1pkt 1fpkt"];
478--1173[label="0.0153846;1pkt 1fpkt"];
478--1208[label="0.0769231;2pkt 2fpkt"];
478--1260[label="0.0140845;1pkt 1fpkt"];
478--1272[label="0.0121951;1pkt 1fpkt"];
478--1293[label="0.047619;1pkt 1fpkt"];
478--1332[label="0.0909091;1pkt 1fpkt"];
478--1357[label="0.0140845;1pkt 1fpkt"];
478--1367[label="0.0117647;1pkt 1fpkt"];
478--1369[label="0.03125;1pkt 1fpkt"];
478--1384[label="0.2;1pkt 1fpkt"];
478--1458[label="0.0666667;1pkt 1fpkt"];
478--1464[label="0.0135135;1pkt 1fpkt"];
478--1473[label="0.2;2pkt 2fpkt"];
478--1503[label="0.0232558;1pkt 1fpkt"];
478--1513[label="0.0357143;1pkt 1fpkt"];
478--1546[label="0.0114943;1pkt 1fpkt"];
478--1556[label="0.0217391;1pkt 1fpkt"];
478--1568[label="0.0322581;1pkt 1fpkt"];
478--1588[label="0.0166667;1pkt 1fpkt"];
478--1682[label="0.0123457;1pkt 1fpkt"];
478--1723[label="0.0140845;1pkt 1fpkt"];
478--1729[label="0.0322581;1pkt 1fpkt"];
478--1738[label="0.2;1pkt 1fpkt"];
478--1780[label="0.181818;2pkt 2fpkt"];
478--1804[label="0.0344828;1pkt 1fpkt"];
478--1842[label="0.0169492;1pkt 1fpkt"];
478--1893[label="0.0121951;1pkt 1fpkt"];
478--1919[label="0.0140845;1pkt 1fpkt"];
478--1928[label="0.2;1pkt 1fpkt"];
478--1950[label="0.2;2pkt 2fpkt"];
1568--1830[label="1;30pkt 30fpkt"];
1738--1928[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="157.96.193.27" dst_port="53"/>
      <filter dst_ip="157.96.193.27" dst_port="35441" src_port="53"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
359[label="157.117.4.122;s;96pkt 96fpkt", shape=diamond, color=yellow];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.117.4.122:53, *:*}[65.625%]&lt;BR/&gt;{157.117.4.122:1287, *:53}[34.375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.0833%)&lt;BR/&gt; 1287: (17.1875%)&lt;BR/&gt; 1024: (1.04167%)&lt;BR/&gt; 58446: (0.520833%)&lt;BR/&gt; 52536: (0.520833%)&gt;];
}
359--532[label="0.5;1pkt 1fpkt"];
359--871[label="0.0729167;7pkt 7fpkt"];
359--876[label="0.03125;3pkt 3fpkt"];
359--888[label="0.0729167;7pkt 7fpkt"];
359--893[label="0.03125;3pkt 3fpkt"];
359--904[label="0.0729167;7pkt 7fpkt"];
359--909[label="0.03125;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="157.117.4.122" src_port="53"/>
      <filter dst_port="53" src_ip="157.117.4.122" src_port="1287"/>
    </slice>
    <from sec="989038801" usec="0"/>
    <to sec="989039626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
411[label="167.223.1.137;d;96pkt 96fpkt", shape=diamond, color=yellow];
1422[label="200.96.114.225;8pkt 8fpkt", shape=pentagon, color=darkviolet];
1431[label="200.222.78.228;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1437[label="200.222.78.230;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1759[label="200.222.78.228;1pkt 1fpkt", shape=invtriangle, color=brown];
1763[label="200.222.78.230;3pkt 3fpkt", shape=invtriangle, color=brown];
1942[label="200.222.78.228;1pkt 1fpkt", shape=invhouse, color=bisque];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 167.223.1.137:*}[96.1905%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 1877: (1.30435%)&lt;BR/&gt; 3638: (0.869565%)&lt;BR/&gt; 1886: (0.869565%)&lt;BR/&gt; 1880: (0.869565%)&gt;];
}
411--917[label="0.272727;3pkt 3fpkt"];
411--1116[label="1;8pkt 8fpkt"];
411--1422[label="0.375;3pkt 3fpkt"];
411--1431[label="0.5;1pkt 1fpkt"];
411--1437[label="0.25;1pkt 1fpkt"];
411--1483[label="0.272727;3pkt 3fpkt"];
411--1595[label="1;8pkt 8fpkt"];
1431--1759[label="1;1pkt 1fpkt"];
1431--1942[label="1;1pkt 1fpkt"];
1437--1763[label="1;3pkt 3fpkt"];
1759--1942[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.1.137" src_port="25"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.104.111.1"/>
    </slice>
    <from sec="989038801" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
430[label="25.239.181.2;s;7pkt 7fpkt", shape=diamond, color=yellow];
920[label="25.239.181.2;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.239.181.2:80, 157.96.201.57:*}[46.1538%]&lt;BR/&gt;{25.239.181.2:80, 130.202.209.138:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1248: (5.26316%)&lt;BR/&gt; 1239: (5.26316%)&lt;BR/&gt; 1238: (5.26316%)&lt;BR/&gt; 1237: (5.26316%)&gt;];
}
430--920[label="0.857143;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="157.96.201.57" src_ip="25.239.181.2" src_port="80"/>
      <filter dst_ip="130.202.209.138" src_ip="25.239.181.2" src_port="80"/>
    </slice>
    <from sec="989038840" usec="0"/>
    <to sec="989039643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="157.96.10.3"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
149[label="200.2.46.5;s;93pkt 93fpkt", shape=diamond, color=yellow];
929[label="200.2.46.5;93pkt 93fpkt", shape=pentagon, color=darkviolet];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.2.46.5:80, 155.59.32.139:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4533: (0.537634%)&lt;BR/&gt; 4532: (0.537634%)&lt;BR/&gt; 4531: (0.537634%)&lt;BR/&gt; 4530: (0.537634%)&gt;];
}
149--929[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter dst_ip="155.59.32.139" src_ip="200.2.46.5" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989038988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.35.103.5"/>
    </slice>
    <from sec="989038889" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00365,1.69547,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
590[label="196.173.209.7;s;91pkt 91fpkt", shape=diamond, color=yellow];
693[label="217.22.112.19;d;132pkt 132fpkt", shape=diamond, color=yellow];
839[label="196.173.209.7;s;91pkt 91fpkt", shape=hexagon, color=black];
935[label="196.173.209.7;91pkt 91fpkt", shape=pentagon, color=darkviolet];
1493[label="196.173.209.7;90pkt 90fpkt", shape=invtriangle, color=brown];
1795[label="196.173.209.7;91pkt 91fpkt", shape=invhouse, color=bisque];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.173.209.7:80, 217.22.112.19:*}[68.9394%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9147%)&lt;BR/&gt; 56717: (0.511945%)&lt;BR/&gt; 56716: (0.511945%)&lt;BR/&gt; 56713: (0.511945%)&lt;BR/&gt; 56712: (0.511945%)&gt;];
}
590--693[label="1;91pkt 91fpkt"];
590--839[label="1;91pkt 91fpkt"];
590--935[label="1;91pkt 91fpkt"];
590--1493[label="1;90pkt 90fpkt"];
590--1795[label="1;91pkt 91fpkt"];
693--839[label="1;91pkt 91fpkt"];
693--935[label="1;91pkt 91fpkt"];
693--1402[label="0.363636;4pkt 4fpkt"];
693--1493[label="1;90pkt 90fpkt"];
693--1745[label="0.3;3pkt 3fpkt"];
693--1795[label="1;91pkt 91fpkt"];
839--935[label="1;91pkt 91fpkt"];
839--1493[label="1;90pkt 90fpkt"];
839--1795[label="1;91pkt 91fpkt"];
935--1493[label="1;90pkt 90fpkt"];
935--1795[label="1;91pkt 91fpkt"];
1493--1795[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_ip="217.22.112.19" src_ip="196.173.209.7" src_port="80"/>
    </slice>
    <from sec="989039264" usec="0"/>
    <to sec="989039608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
547[label="193.178.192.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
938[label="193.178.192.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.178.192.8:6346, 155.59.208.20:47518}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47518: (50%)&lt;BR/&gt; 6346: (50%)&gt;];
}
547--938[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.59.208.20" dst_port="47518" src_ip="193.178.192.8" src_port="6346"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.35.123.13"/>
    </slice>
    <from sec="989038803" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.166.207.13"/>
    </slice>
    <from sec="989039373" usec="0"/>
    <to sec="989039670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.0.234.13"/>
    </slice>
    <from sec="989038813" usec="0"/>
    <to sec="989039682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.168.114.15"/>
    </slice>
    <from sec="989038801" usec="0"/>
    <to sec="989039351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
187[label="155.59.208.17;s;38pkt 38fpkt", shape=diamond, color=yellow];
229[label="70.65.6.60;d;1pkt 1fpkt", shape=diamond, color=yellow];
249[label="70.35.115.58;d;1pkt 1fpkt", shape=diamond, color=yellow];
338[label="25.146.5.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
388[label="70.176.174.205;d;1pkt 1fpkt", shape=diamond, color=yellow];
398[label="193.222.113.34;d;1pkt 1fpkt", shape=diamond, color=yellow];
959[label="155.59.208.17;38pkt 38fpkt", shape=pentagon, color=darkviolet];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.59.208.17:*, *:6346}[63.1579%]&lt;BR/&gt;{155.59.208.17:*, *:80}[23.6842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (32.716%)&lt;BR/&gt; 80: (11.1111%)&lt;BR/&gt; 6355: (3.7037%)&lt;BR/&gt; 6347: (2.46914%)&lt;BR/&gt; 25996: (1.85185%)&gt;];
}
187--229[label="1;1pkt 1fpkt"];
187--249[label="1;1pkt 1fpkt"];
187--338[label="1;1pkt 1fpkt"];
187--388[label="1;1pkt 1fpkt"];
187--398[label="1;1pkt 1fpkt"];
187--959[label="1;38pkt 38fpkt"];
229--959[label="1;1pkt 1fpkt"];
249--959[label="1;1pkt 1fpkt"];
338--959[label="1;1pkt 1fpkt"];
388--959[label="1;1pkt 1fpkt"];
398--959[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6346" src_ip="155.59.208.17"/>
      <filter dst_port="80" src_ip="155.59.208.17"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.59.21.18"/>
    </slice>
    <from sec="989038820" usec="0"/>
    <to sec="989039680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
55[label="216.115.217.19;s;794pkt 794fpkt", shape=diamond, color=yellow];
174[label="85.162.162.230;d;3pkt 3fpkt", shape=diamond, color=yellow];
378[label="85.166.147.33;d;2pkt 2fpkt", shape=diamond, color=yellow];
575[label="222.142.122.166;d;10pkt 10fpkt", shape=diamond, color=yellow];
964[label="216.115.217.19;818pkt 818fpkt", shape=pentagon, color=darkviolet];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.115.217.19:*, *:80}[71.3422%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.6484%)&lt;BR/&gt; 53: (11.3706%)&lt;BR/&gt; 0: (3.01168%)&lt;BR/&gt; 25: (1.38291%)&lt;BR/&gt; 123: (0.399508%)&gt;];
}
55--174[label="1;3pkt 3fpkt"];
55--378[label="1;2pkt 2fpkt"];
55--476[label="1;1pkt 1fpkt"];
55--565[label="0.0204082;4pkt 4fpkt"];
55--575[label="0.1;1pkt 1fpkt"];
55--644[label="1;45pkt 45fpkt"];
55--870[label="0.00251889;2pkt 2fpkt"];
55--871[label="0.0100756;8pkt 8fpkt"];
55--872[label="0.0465995;37pkt 37fpkt"];
55--875[label="0.0031746;2pkt 2fpkt"];
55--876[label="0.011335;9pkt 9fpkt"];
55--884[label="0.0214106;17pkt 17fpkt"];
55--887[label="0.00251889;2pkt 2fpkt"];
55--888[label="0.0100756;8pkt 8fpkt"];
55--889[label="0.0465995;37pkt 37fpkt"];
55--892[label="0.0031746;2pkt 2fpkt"];
55--893[label="0.011335;9pkt 9fpkt"];
55--901[label="0.0214106;17pkt 17fpkt"];
55--903[label="0.00251889;2pkt 2fpkt"];
55--904[label="0.0100756;8pkt 8fpkt"];
55--905[label="0.0465995;37pkt 37fpkt"];
55--908[label="0.0031746;2pkt 2fpkt"];
55--909[label="0.011335;9pkt 9fpkt"];
55--964[label="1;794pkt 794fpkt"];
174--964[label="1;3pkt 3fpkt"];
378--964[label="1;2pkt 2fpkt"];
575--711[label="0.2;2pkt 2fpkt"];
575--778[label="0.1;1pkt 1fpkt"];
575--964[label="0.1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="216.115.217.19"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.90.190.26"/>
    </slice>
    <from sec="989038826" usec="0"/>
    <to sec="989038873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,504,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
480[label="198.136.50.28;s;87pkt 87fpkt", shape=diamond, color=yellow];
983[label="198.136.50.28;106pkt 106fpkt", shape=pentagon, color=darkviolet];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.136.50.28:443, 167.223.1.122:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3114: (0.518135%)&lt;BR/&gt; 3110: (0.518135%)&lt;BR/&gt; 3108: (0.518135%)&lt;BR/&gt; 3076: (0.518135%)&gt;];
}
480--983[label="0.988506;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.1.122" src_ip="198.136.50.28" src_port="443"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576123,1.72015,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
587[label="130.202.192.184;d;43pkt 43fpkt", shape=diamond, color=yellow];
987[label="220.115.39.30;7pkt 7fpkt", shape=pentagon, color=darkviolet];
1522[label="220.115.39.30;8pkt 8fpkt", shape=invtriangle, color=brown];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.115.39.166:80, 130.202.192.184:*}[41.8605%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.6897%)&lt;BR/&gt; 5190: (4.31034%)&lt;BR/&gt; 1370: (2.58621%)&lt;BR/&gt; 1349: (2.58621%)&lt;BR/&gt; 1348: (2.58621%)&gt;];
}
587--987[label="1;7pkt 7fpkt"];
587--1522[label="1;8pkt 8fpkt"];
987--1522[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.192.184" src_ip="220.115.39.166" src_port="80"/>
    </slice>
    <from sec="989039179" usec="0"/>
    <to sec="989039415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.53.175.32"/>
    </slice>
    <from sec="989039521" usec="0"/>
    <to sec="989039563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.223.132.33"/>
    </slice>
    <from sec="989038836" usec="0"/>
    <to sec="989039678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="157.96.213.33"/>
    </slice>
    <from sec="989038818" usec="0"/>
    <to sec="989039666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.138.156.34"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.69.10.36"/>
    </slice>
    <from sec="989038889" usec="0"/>
    <to sec="989039255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.50.32.37"/>
    </slice>
    <from sec="989038806" usec="0"/>
    <to sec="989039682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.97.154.39"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.224.128.40"/>
    </slice>
    <from sec="989039241" usec="0"/>
    <to sec="989039599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
168[label="130.202.209.34;d;19pkt 19fpkt", shape=diamond, color=yellow];
990[label="199.173.72.30;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1017[label="220.83.169.40;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1538[label="220.83.169.40;4pkt 4fpkt", shape=invtriangle, color=brown];
1812[label="220.83.169.40;3pkt 3fpkt", shape=invhouse, color=bisque];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 130.202.209.34:*}[86.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1224: (6.25%)&lt;BR/&gt; 3298: (4.6875%)&lt;BR/&gt; 3226: (4.6875%)&lt;BR/&gt; 2356: (3.125%)&gt;];
}
168--990[label="1;2pkt 2fpkt"];
168--1017[label="0.25;1pkt 1fpkt"];
168--1253[label="0.105263;2pkt 2fpkt"];
168--1538[label="0.25;1pkt 1fpkt"];
168--1670[label="0.105263;2pkt 2fpkt"];
168--1812[label="0.333333;1pkt 1fpkt"];
1017--1538[label="1;4pkt 4fpkt"];
1017--1812[label="1;3pkt 3fpkt"];
1538--1812[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.209.34" src_port="80"/>
    </slice>
    <from sec="989038824" usec="0"/>
    <to sec="989039548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12997,1.77459,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
2[label="213.19.79.41s;1pkt 1fpkt", shape=rectangle, color=red];
1020[label="213.19.79.41;34pkt 34fpkt", shape=pentagon, color=darkviolet];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.19.79.41:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43675: (2.85714%)&lt;BR/&gt; 65433: (1.42857%)&lt;BR/&gt; 65285: (1.42857%)&lt;BR/&gt; 64367: (1.42857%)&gt;];
}
2--1020[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="213.19.79.41"/>
    </slice>
    <from sec="989038804" usec="0"/>
    <to sec="989039670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.223.132.41"/>
    </slice>
    <from sec="989038806" usec="0"/>
    <to sec="989039682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
735[label="211.41.73.14;s;113pkt 113fpkt", shape=diamond, color=yellow];
737[label="130.202.160.114;d;138pkt 138fpkt", shape=diamond, color=yellow];
1026[label="200.179.60.42;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.41.73.14:80, 130.202.160.114:*}[76.7606%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0385%)&lt;BR/&gt; 53: (1.53846%)&lt;BR/&gt; 1771: (0.384615%)&lt;BR/&gt; 1770: (0.384615%)&lt;BR/&gt; 1769: (0.384615%)&gt;];
}
735--737[label="0.964602;109pkt 109fpkt"];
735--870[label="0.00884956;1pkt 1fpkt"];
735--871[label="0.0176991;2pkt 2fpkt"];
735--887[label="0.00884956;1pkt 1fpkt"];
735--888[label="0.0176991;2pkt 2fpkt"];
735--903[label="0.00884956;1pkt 1fpkt"];
735--904[label="0.0176991;2pkt 2fpkt"];
737--1026[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.160.114" src_ip="211.41.73.14" src_port="80"/>
    </slice>
    <from sec="989039136" usec="0"/>
    <to sec="989039577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.128.10.43"/>
    </slice>
    <from sec="989038857" usec="0"/>
    <to sec="989039582" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
116[label="167.223.1.122;d;2032pkt 2032fpkt", shape=diamond, color=yellow];
940[label="216.76.160.9;21pkt 21fpkt", shape=pentagon, color=darkviolet];
1060[label="199.113.146.56;14pkt 14fpkt", shape=pentagon, color=darkviolet];
1127[label="208.165.175.91;78pkt 78fpkt", shape=pentagon, color=darkviolet];
1289[label="103.24.65.171;77pkt 77fpkt", shape=pentagon, color=darkviolet];
1342[label="216.76.191.195;17pkt 17fpkt", shape=pentagon, color=darkviolet];
1347[label="216.200.95.197;18pkt 18fpkt", shape=pentagon, color=darkviolet];
1452[label="103.131.254.233;42pkt 42fpkt", shape=pentagon, color=darkviolet];
1562[label="199.113.146.56;14pkt 14fpkt", shape=invtriangle, color=brown];
1601[label="208.165.175.91;77pkt 77fpkt", shape=invtriangle, color=brown];
1714[label="216.76.191.195;17pkt 17fpkt", shape=invtriangle, color=brown];
1825[label="199.113.146.56;14pkt 14fpkt", shape=invhouse, color=bisque];
1948[label="103.131.254.233;41pkt 41fpkt", shape=invhouse, color=bisque];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 167.223.1.122:*}[69.7248%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (40.7595%)&lt;BR/&gt; 80: (4.69131%)&lt;BR/&gt; 443: (3.41186%)&lt;BR/&gt; 3128: (0.893582%)&lt;BR/&gt; 0: (0.446791%)&gt;];
}
116--120[label="0.0221457;45pkt 45fpkt"];
116--356[label="0.101523;20pkt 20fpkt"];
116--370[label="0.00990099;1pkt 1fpkt"];
116--480[label="1;87pkt 87fpkt"];
116--487[label="0.0106383;1pkt 1fpkt"];
116--568[label="0.00892857;1pkt 1fpkt"];
116--784[label="0.00990099;1pkt 1fpkt"];
116--864[label="0.00978179;13pkt 13fpkt"];
116--882[label="0.00978179;13pkt 13fpkt"];
116--899[label="0.00978179;13pkt 13fpkt"];
116--940[label="0.190476;4pkt 4fpkt"];
116--951[label="0.139535;6pkt 6fpkt"];
116--958[label="0.0846154;22pkt 22fpkt"];
116--969[label="0.0595238;5pkt 5fpkt"];
116--983[label="1;106pkt 106fpkt"];
116--1034[label="0.340909;30pkt 30fpkt"];
116--1044[label="0.5;18pkt 18fpkt"];
116--1053[label="0.108696;5pkt 5fpkt"];
116--1060[label="1;14pkt 14fpkt"];
116--1104[label="0.0166667;1pkt 1fpkt"];
116--1112[label="0.883333;53pkt 53fpkt"];
116--1127[label="0.923077;72pkt 72fpkt"];
116--1133[label="0.111111;3pkt 3fpkt"];
116--1168[label="0.00833333;1pkt 1fpkt"];
116--1173[label="0.4;26pkt 26fpkt"];
116--1260[label="0.366197;26pkt 26fpkt"];
116--1272[label="0.439024;36pkt 36fpkt"];
116--1284[label="0.04;1pkt 1fpkt"];
116--1289[label="0.883117;68pkt 68fpkt"];
116--1338[label="0.00694444;1pkt 1fpkt"];
116--1342[label="1;17pkt 17fpkt"];
116--1347[label="1;18pkt 18fpkt"];
116--1353[label="0.418605;18pkt 18fpkt"];
116--1356[label="0.263158;5pkt 5fpkt"];
116--1357[label="0.43662;31pkt 31fpkt"];
116--1363[label="0.0714286;1pkt 1fpkt"];
116--1367[label="0.411765;35pkt 35fpkt"];
116--1399[label="0.03125;1pkt 1fpkt"];
116--1452[label="0.833333;35pkt 35fpkt"];
116--1464[label="0.310811;23pkt 23fpkt"];
116--1503[label="0.139535;6pkt 6fpkt"];
116--1546[label="0.344828;30pkt 30fpkt"];
116--1556[label="0.108696;5pkt 5fpkt"];
116--1562[label="1;14pkt 14fpkt"];
116--1588[label="0.0166667;1pkt 1fpkt"];
116--1601[label="0.935065;72pkt 72fpkt"];
116--1617[label="0.00833333;1pkt 1fpkt"];
116--1682[label="0.444444;36pkt 36fpkt"];
116--1689[label="0.04;1pkt 1fpkt"];
116--1714[label="1;17pkt 17fpkt"];
116--1721[label="0.418605;18pkt 18fpkt"];
116--1723[label="0.43662;31pkt 31fpkt"];
116--1771[label="0.833333;35pkt 35fpkt"];
116--1825[label="1;14pkt 14fpkt"];
116--1842[label="0.0169492;1pkt 1fpkt"];
116--1852[label="0.107143;3pkt 3fpkt"];
116--1856[label="0.00833333;1pkt 1fpkt"];
116--1893[label="0.439024;36pkt 36fpkt"];
116--1899[label="0.04;1pkt 1fpkt"];
116--1917[label="0.428571;18pkt 18fpkt"];
116--1919[label="0.43662;31pkt 31fpkt"];
116--1948[label="0.853659;35pkt 35fpkt"];
1060--1562[label="1;14pkt 14fpkt"];
1060--1825[label="1;14pkt 14fpkt"];
1127--1601[label="1;77pkt 77fpkt"];
1342--1714[label="1;17pkt 17fpkt"];
1452--1771[label="1;42pkt 42fpkt"];
1452--1948[label="1;41pkt 41fpkt"];
1562--1825[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.1.122" src_port="53"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.194.217.46"/>
    </slice>
    <from sec="989038809" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.122.28.64"/>
    </slice>
    <from sec="989039029" usec="0"/>
    <to sec="989039666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.1.50.64"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.74.108.64"/>
    </slice>
    <from sec="989039573" usec="0"/>
    <to sec="989039668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.32.78.68"/>
    </slice>
    <from sec="989038988" usec="0"/>
    <to sec="989039083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.50.73.69"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.117.88.69"/>
    </slice>
    <from sec="989038804" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.46.146.74"/>
    </slice>
    <from sec="989038801" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576123,1.72015,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
307[label="157.117.4.121;d;310pkt 310fpkt", shape=diamond, color=yellow];
1014[label="221.197.185.39;25pkt 25fpkt", shape=pentagon, color=darkviolet];
1151[label="210.185.193.103;25pkt 25fpkt", shape=pentagon, color=darkviolet];
1180[label="196.92.81.121;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1416[label="113.241.29.224;24pkt 24fpkt", shape=pentagon, color=darkviolet];
1535[label="221.197.185.39;24pkt 24fpkt", shape=invtriangle, color=brown];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 157.117.4.121:2847}[37.0079%]&lt;BR/&gt;{*:*, 157.117.4.121:53}[27.8215%]&lt;BR/&gt;{*:0, *:0}[23.0971%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (30.8068%)&lt;BR/&gt; 0: (28.1174%)&lt;BR/&gt; 2847: (17.3594%)&lt;BR/&gt; 25: (3.30073%)&lt;BR/&gt; 113: (2.07824%)&gt;];
}
307--424[label="0.0285714;1pkt 1fpkt"];
307--555[label="0.0784314;4pkt 4fpkt"];
307--557[label="0.0645161;20pkt 20fpkt"];
307--829[label="0.0285714;1pkt 1fpkt"];
307--871[label="0.0129032;4pkt 4fpkt"];
307--876[label="0.00322581;1pkt 1fpkt"];
307--888[label="0.0129032;4pkt 4fpkt"];
307--893[label="0.00322581;1pkt 1fpkt"];
307--904[label="0.0129032;4pkt 4fpkt"];
307--909[label="0.00322581;1pkt 1fpkt"];
307--932[label="0.142857;1pkt 1fpkt"];
307--936[label="0.0263158;1pkt 1fpkt"];
307--939[label="0.1;1pkt 1fpkt"];
307--969[label="0.0119048;1pkt 1fpkt"];
307--1014[label="0.04;1pkt 1fpkt"];
307--1034[label="0.0113636;1pkt 1fpkt"];
307--1090[label="0.0294118;1pkt 1fpkt"];
307--1104[label="0.0166667;1pkt 1fpkt"];
307--1137[label="0.0289855;2pkt 2fpkt"];
307--1142[label="0.08;4pkt 4fpkt"];
307--1151[label="0.04;1pkt 1fpkt"];
307--1173[label="0.0153846;1pkt 1fpkt"];
307--1180[label="1;1pkt 1fpkt"];
307--1260[label="0.0140845;1pkt 1fpkt"];
307--1272[label="0.0121951;1pkt 1fpkt"];
307--1353[label="0.0232558;1pkt 1fpkt"];
307--1357[label="0.0140845;1pkt 1fpkt"];
307--1367[label="0.0117647;1pkt 1fpkt"];
307--1386[label="0.0833333;1pkt 1fpkt"];
307--1400[label="0.0222222;1pkt 1fpkt"];
307--1416[label="0.0416667;1pkt 1fpkt"];
307--1439[label="0.0625;1pkt 1fpkt"];
307--1451[label="0.25;1pkt 1fpkt"];
307--1494[label="0.0263158;1pkt 1fpkt"];
307--1497[label="0.1;1pkt 1fpkt"];
307--1535[label="0.0416667;1pkt 1fpkt"];
307--1546[label="0.0114943;1pkt 1fpkt"];
307--1581[label="0.0285714;1pkt 1fpkt"];
307--1588[label="0.0166667;1pkt 1fpkt"];
307--1606[label="0.08;4pkt 4fpkt"];
307--1682[label="0.0123457;1pkt 1fpkt"];
307--1721[label="0.0232558;1pkt 1fpkt"];
307--1723[label="0.0140845;1pkt 1fpkt"];
307--1770[label="0.2;1pkt 1fpkt"];
307--1796[label="0.027027;1pkt 1fpkt"];
307--1799[label="0.1;1pkt 1fpkt"];
307--1838[label="0.0294118;1pkt 1fpkt"];
307--1842[label="0.0169492;1pkt 1fpkt"];
307--1893[label="0.0121951;1pkt 1fpkt"];
307--1917[label="0.0238095;1pkt 1fpkt"];
307--1919[label="0.0140845;1pkt 1fpkt"];
1014--1535[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="157.117.4.121" dst_port="53"/>
      <filter dst_ip="157.117.4.121" dst_port="2847" src_port="53"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.122.28.78"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
259[label="130.202.208.176;d;145pkt 145fpkt", shape=diamond, color=yellow];
434[label="85.130.30.106;s;80pkt 80fpkt", shape=diamond, color=yellow];
955[label="200.192.90.16;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1157[label="85.130.30.106;167pkt 167fpkt", shape=pentagon, color=darkviolet];
1182[label="200.0.244.121;6pkt 6fpkt", shape=pentagon, color=darkviolet];
1341[label="223.104.141.194;7pkt 7fpkt", shape=pentagon, color=darkviolet];
1504[label="200.192.90.16;1pkt 1fpkt", shape=invtriangle, color=brown];
1624[label="200.0.244.121;5pkt 5fpkt", shape=invtriangle, color=brown];
1802[label="200.192.90.16;1pkt 1fpkt", shape=invhouse, color=bisque];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.130.30.106:80, 130.202.208.176:*}[63.3962%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6377%)&lt;BR/&gt; 1519: (0.483092%)&lt;BR/&gt; 1708: (0.362319%)&lt;BR/&gt; 1706: (0.362319%)&lt;BR/&gt; 1703: (0.362319%)&gt;];
}
259--950[label="0.2;7pkt 7fpkt"];
259--955[label="1;2pkt 2fpkt"];
259--1095[label="0.0588235;3pkt 3fpkt"];
259--1157[label="0.365517;53pkt 53fpkt"];
259--1182[label="0.833333;5pkt 5fpkt"];
259--1341[label="0.285714;2pkt 2fpkt"];
259--1502[label="0.2;7pkt 7fpkt"];
259--1504[label="1;1pkt 1fpkt"];
259--1624[label="0.8;4pkt 4fpkt"];
259--1801[label="0.2;7pkt 7fpkt"];
259--1802[label="1;1pkt 1fpkt"];
434--1157[label="1;80pkt 80fpkt"];
955--1504[label="1;1pkt 1fpkt"];
955--1802[label="1;1pkt 1fpkt"];
1182--1624[label="1;5pkt 5fpkt"];
1504--1802[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.208.176" src_ip="85.130.30.106" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,501,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
401[label="167.223.53.86;s;10pkt 10fpkt", shape=diamond, color=yellow];
1109[label="167.223.53.86;10pkt 10fpkt", shape=pentagon, color=darkviolet];
1591[label="167.223.53.86;9pkt 9fpkt", shape=invtriangle, color=brown];
1844[label="167.223.53.86;10pkt 10fpkt", shape=invhouse, color=bisque];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.223.53.86:21, *:*}[30%]&lt;BR/&gt;{167.223.53.86:*, 25.110.11.120:*}[30%]&lt;BR/&gt;{167.223.53.86:*, 25.110.11.52:21}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (39.7436%)&lt;BR/&gt; 41178: (10.2564%)&lt;BR/&gt; 54489: (5.12821%)&lt;BR/&gt; 33701: (5.12821%)&lt;BR/&gt; 3057: (5.12821%)&gt;];
}
401--1109[label="1;10pkt 10fpkt"];
401--1591[label="1;9pkt 9fpkt"];
401--1844[label="1;10pkt 10fpkt"];
1109--1591[label="1;9pkt 9fpkt"];
1109--1844[label="1;10pkt 10fpkt"];
1591--1844[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="25.110.11.120" src_ip="167.223.53.86"/>
      <filter src_ip="167.223.53.86" src_port="21"/>
      <filter dst_ip="25.110.11.52" dst_port="21" src_ip="167.223.53.86"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.41.146.89"/>
    </slice>
    <from sec="989038944" usec="0"/>
    <to sec="989039113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.202.219.92"/>
    </slice>
    <from sec="989038811" usec="0"/>
    <to sec="989039654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.1.4.94"/>
    </slice>
    <from sec="989038871" usec="0"/>
    <to sec="989039637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.59.0.97"/>
    </slice>
    <from sec="989038818" usec="0"/>
    <to sec="989039678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
377[label="199.144.203.98;s;14pkt 14fpkt", shape=diamond, color=yellow];
1145[label="199.144.203.98;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.144.203.98:80, 216.115.217.19:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49849: (3.7037%)&lt;BR/&gt; 49744: (3.7037%)&lt;BR/&gt; 49690: (3.7037%)&lt;BR/&gt; 49674: (3.7037%)&gt;];
}
377--1145[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="216.115.217.19" src_ip="199.144.203.98" src_port="80"/>
    </slice>
    <from sec="989038925" usec="0"/>
    <to sec="989039112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.223.8.101"/>
    </slice>
    <from sec="989038896" usec="0"/>
    <to sec="989039671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.74.136.104"/>
    </slice>
    <from sec="989039111" usec="0"/>
    <to sec="989039216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
523[label="25.185.176.105;d;147pkt 147fpkt", shape=diamond, color=yellow];
1160[label="217.22.120.108;23pkt 23fpkt", shape=pentagon, color=darkviolet];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.22.121.232:80, 25.185.176.105:*}[83.432%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4118%)&lt;BR/&gt; 4671: (0.588235%)&lt;BR/&gt; 3426: (0.588235%)&lt;BR/&gt; 64154: (0.294118%)&lt;BR/&gt; 57257: (0.294118%)&gt;];
}
523--1160[label="0.0434783;1pkt 1fpkt"];
523--1446[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter dst_ip="25.185.176.105" src_ip="217.22.121.232" src_port="80"/>
    </slice>
    <from sec="989038834" usec="0"/>
    <to sec="989039668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576123,1.72015,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
677[label="217.16.214.56;d;378pkt 378fpkt", shape=diamond, color=yellow];
1172[label="198.104.52.114;12pkt 12fpkt", shape=pentagon, color=darkviolet];
1620[label="198.104.52.114;11pkt 11fpkt", shape=invtriangle, color=brown];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 217.16.214.56:0}[97.1722%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
677--969[label="0.0119048;1pkt 1fpkt"];
677--1172[label="0.0833333;1pkt 1fpkt"];
677--1620[label="0.0909091;1pkt 1fpkt"];
1172--1620[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="217.16.214.56"/>
    </slice>
    <from sec="989038802" usec="0"/>
    <to sec="989039670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.223.1.115"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.171.154.115"/>
    </slice>
    <from sec="989039065" usec="0"/>
    <to sec="989039237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
562[label="157.96.200.115;s;22pkt 22fpkt", shape=diamond, color=yellow];
1177[label="157.96.200.115;38pkt 38fpkt", shape=pentagon, color=darkviolet];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.96.200.115:*, 220.182.213.43:80}[76.3158%]&lt;BR/&gt;{157.96.200.115:*, 220.160.93.7:80}[23.6842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1217: (1.66667%)&lt;BR/&gt; 1216: (1.66667%)&lt;BR/&gt; 1215: (1.66667%)&lt;BR/&gt; 1214: (1.66667%)&gt;];
}
562--1177[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="220.182.213.43" dst_port="80" src_ip="157.96.200.115"/>
      <filter dst_ip="220.160.93.7" dst_port="80" src_ip="157.96.200.115"/>
    </slice>
    <from sec="989038806" usec="0"/>
    <to sec="989039640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
188[label="210.12.221.124;s;72pkt 72fpkt", shape=diamond, color=yellow];
1187[label="210.12.221.124;97pkt 97fpkt", shape=pentagon, color=darkviolet];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.12.221.124:10080, 167.223.7.196:*}[98.9796%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10080: (49.4083%)&lt;BR/&gt; 3130: (1.18343%)&lt;BR/&gt; 2650: (0.591716%)&lt;BR/&gt; 2642: (0.591716%)&lt;BR/&gt; 2629: (0.591716%)&gt;];
}
188--189[label="1;72pkt 72fpkt"];
188--1187[label="0.986111;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.7.196" src_ip="210.12.221.124" src_port="10080"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.44.6.125"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.250.155.125"/>
    </slice>
    <from sec="989039280" usec="0"/>
    <to sec="989039616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.18.61.126"/>
    </slice>
    <from sec="989038812" usec="0"/>
    <to sec="989039373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,504,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
744[label="24.114.71.126;s;4pkt 4fpkt", shape=diamond, color=yellow];
745[label="155.59.224.87;d;4pkt 4fpkt", shape=diamond, color=yellow];
1196[label="24.114.71.126;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.114.71.126:443, 155.59.224.87:1907}[25%]&lt;BR/&gt;{24.114.71.126:80, 155.59.224.87:1904}[25%]&lt;BR/&gt;{24.114.71.126:80, 155.59.224.87:1905}[25%]&lt;BR/&gt;{24.114.71.126:80, 155.59.224.87:1906}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 1907: (12.5%)&lt;BR/&gt; 1906: (12.5%)&lt;BR/&gt; 1905: (12.5%)&lt;BR/&gt; 1904: (12.5%)&gt;];
}
744--745[label="1;4pkt 4fpkt"];
744--1196[label="1;4pkt 4fpkt"];
745--1196[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="155.59.224.87" dst_port="1906" src_ip="24.114.71.126" src_port="80"/>
      <filter dst_ip="155.59.224.87" dst_port="1905" src_ip="24.114.71.126" src_port="80"/>
      <filter dst_ip="155.59.224.87" dst_port="1904" src_ip="24.114.71.126" src_port="80"/>
      <filter dst_ip="155.59.224.87" dst_port="1907" src_ip="24.114.71.126" src_port="443"/>
    </slice>
    <from sec="989039600" usec="0"/>
    <to sec="989039638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.161.215.126"/>
    </slice>
    <from sec="989039309" usec="0"/>
    <to sec="989039581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.103.13.132"/>
    </slice>
    <from sec="989039121" usec="0"/>
    <to sec="989039217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.100.30.133"/>
    </slice>
    <from sec="989038801" usec="0"/>
    <to sec="989039683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
414[label="155.59.21.14;d;77pkt 77fpkt", shape=diamond, color=yellow];
630[label="160.90.176.252;d;66pkt 66fpkt", shape=diamond, color=yellow];
954[label="217.23.65.16;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1025[label="25.128.20.42;9pkt 9fpkt", shape=pentagon, color=darkviolet];
1206[label="216.112.187.133;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1221[label="216.112.187.138;29pkt 29fpkt", shape=pentagon, color=darkviolet];
1639[label="216.112.187.133;10pkt 10fpkt", shape=invtriangle, color=brown];
1647[label="216.112.187.138;29pkt 29fpkt", shape=invtriangle, color=brown];
1869[label="216.112.187.133;10pkt 10fpkt", shape=invhouse, color=bisque];
1873[label="216.112.187.138;29pkt 29fpkt", shape=invhouse, color=bisque];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 155.59.21.14:*}[52.9801%]&lt;BR/&gt;{102.194.9.207:8200, 160.90.176.252:*}[31.7881%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.0584%)&lt;BR/&gt; 8200: (8.75912%)&lt;BR/&gt; 3290: (0.729927%)&lt;BR/&gt; 3274: (0.729927%)&lt;BR/&gt; 3273: (0.729927%)&gt;];
}
414--864[label="0.0649351;5pkt 5fpkt"];
414--882[label="0.0649351;5pkt 5fpkt"];
414--899[label="0.0649351;5pkt 5fpkt"];
414--954[label="1;4pkt 4fpkt"];
414--1017[label="0.25;1pkt 1fpkt"];
414--1025[label="1;9pkt 9fpkt"];
414--1206[label="0.545455;6pkt 6fpkt"];
414--1221[label="0.448276;13pkt 13fpkt"];
414--1538[label="0.25;1pkt 1fpkt"];
414--1639[label="0.6;6pkt 6fpkt"];
414--1647[label="0.448276;13pkt 13fpkt"];
414--1812[label="0.333333;1pkt 1fpkt"];
414--1869[label="0.6;6pkt 6fpkt"];
414--1873[label="0.448276;13pkt 13fpkt"];
630--1206[label="0.363636;4pkt 4fpkt"];
630--1221[label="0.310345;9pkt 9fpkt"];
630--1639[label="0.3;3pkt 3fpkt"];
630--1647[label="0.310345;9pkt 9fpkt"];
630--1869[label="0.3;3pkt 3fpkt"];
630--1873[label="0.310345;9pkt 9fpkt"];
1206--1639[label="1;10pkt 10fpkt"];
1206--1869[label="1;10pkt 10fpkt"];
1221--1647[label="1;29pkt 29fpkt"];
1221--1873[label="1;29pkt 29fpkt"];
1639--1869[label="1;10pkt 10fpkt"];
1647--1873[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="155.59.21.14" src_port="80"/>
      <filter dst_ip="160.90.176.252" src_ip="102.194.9.207" src_port="8200"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.196.201.135"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.223.1.136"/>
    </slice>
    <from sec="989038840" usec="0"/>
    <to sec="989039482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
109[label="198.153.28.138;s;2pkt 2fpkt", shape=diamond, color=yellow];
1217[label="198.153.28.138;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1644[label="198.153.28.138;1pkt 1fpkt", shape=invtriangle, color=brown];
1872[label="198.153.28.138;1pkt 1fpkt", shape=invhouse, color=bisque];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.153.28.138:1214, 155.59.208.20:48838}[50%]&lt;BR/&gt;{198.153.28.138:1214, 155.59.208.20:49200}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 49200: (40%)&lt;BR/&gt; 48838: (10%)&gt;];
}
109--1217[label="1;1pkt 1fpkt"];
109--1644[label="1;1pkt 1fpkt"];
109--1872[label="1;1pkt 1fpkt"];
1217--1644[label="1;1pkt 1fpkt"];
1217--1872[label="1;1pkt 1fpkt"];
1644--1872[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.59.208.20" dst_port="49200" src_ip="198.153.28.138" src_port="1214"/>
      <filter dst_ip="155.59.208.20" dst_port="48838" src_ip="198.153.28.138" src_port="1214"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.160.82.138"/>
    </slice>
    <from sec="989039300" usec="0"/>
    <to sec="989039680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.54.22.140"/>
    </slice>
    <from sec="989039290" usec="0"/>
    <to sec="989039641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.74.9.142"/>
    </slice>
    <from sec="989038808" usec="0"/>
    <to sec="989039429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.165.164.145"/>
    </slice>
    <from sec="989039078" usec="0"/>
    <to sec="989039683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00365,1.69547,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
152[label="158.88.102.177;d;5pkt 5fpkt", shape=diamond, color=yellow];
154[label="216.168.103.149;s;94pkt 94fpkt", shape=diamond, color=yellow];
354[label="217.22.126.20;s;16pkt 16fpkt", shape=diamond, color=yellow];
479[label="216.168.85.220;s;23pkt 23fpkt", shape=diamond, color=yellow];
605[label="200.106.4.64;d;38pkt 38fpkt", shape=diamond, color=yellow];
671[label="130.131.64.115;s;64pkt 64fpkt", shape=diamond, color=yellow];
762[label="158.88.102.177;d;4pkt 4fpkt", shape=hexagon, color=black];
796[label="216.168.85.220;s;22pkt 22fpkt", shape=hexagon, color=black];
1022[label="217.22.120.41;17pkt 17fpkt", shape=pentagon, color=darkviolet];
1028[label="217.22.120.42;26pkt 26fpkt", shape=pentagon, color=darkviolet];
1166[label="167.223.1.112;18pkt 18fpkt", shape=pentagon, color=darkviolet];
1175[label="130.131.64.115;66pkt 66fpkt", shape=pentagon, color=darkviolet];
1235[label="211.145.139.146;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1544[label="217.22.120.42;26pkt 26fpkt", shape=invtriangle, color=brown];
1621[label="130.131.64.115;66pkt 66fpkt", shape=invtriangle, color=brown];
1658[label="211.145.139.146;11pkt 11fpkt", shape=invtriangle, color=brown];
1860[label="130.131.64.115;66pkt 66fpkt", shape=invhouse, color=bisque];
1879[label="211.145.139.146;12pkt 12fpkt", shape=invhouse, color=bisque];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.168.103.149:0, *:0}[30.719%]&lt;BR/&gt;{130.131.64.115:0, *:0}[21.5686%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.4615%)&lt;BR/&gt; 111: (0.512821%)&lt;BR/&gt; 25: (0.25641%)&lt;BR/&gt; 34810: (0.17094%)&lt;BR/&gt; 34036: (0.17094%)&gt;];
}
152--154[label="0.2;1pkt 1fpkt"];
152--762[label="1;4pkt 4fpkt"];
152--1235[label="0.2;1pkt 1fpkt"];
152--1658[label="0.2;1pkt 1fpkt"];
152--1879[label="0.2;1pkt 1fpkt"];
154--605[label="0.0263158;1pkt 1fpkt"];
154--762[label="0.25;1pkt 1fpkt"];
354--605[label="0.0625;1pkt 1fpkt"];
479--605[label="0.0434783;1pkt 1fpkt"];
479--796[label="1;22pkt 22fpkt"];
605--664[label="0.125;1pkt 1fpkt"];
605--671[label="0.0263158;1pkt 1fpkt"];
605--796[label="0.0454545;1pkt 1fpkt"];
605--1022[label="0.0588235;1pkt 1fpkt"];
605--1028[label="0.0384615;1pkt 1fpkt"];
605--1096[label="0.0263158;1pkt 1fpkt"];
605--1166[label="0.0555556;1pkt 1fpkt"];
605--1175[label="0.0263158;1pkt 1fpkt"];
605--1454[label="0.0263158;1pkt 1fpkt"];
605--1544[label="0.0384615;1pkt 1fpkt"];
605--1621[label="0.0263158;1pkt 1fpkt"];
605--1860[label="0.0263158;1pkt 1fpkt"];
671--1175[label="1;64pkt 64fpkt"];
671--1621[label="1;64pkt 64fpkt"];
671--1860[label="1;64pkt 64fpkt"];
1028--1544[label="1;26pkt 26fpkt"];
1175--1621[label="1;66pkt 66fpkt"];
1175--1860[label="1;66pkt 66fpkt"];
1235--1658[label="1;11pkt 11fpkt"];
1235--1879[label="1;11pkt 11fpkt"];
1621--1860[label="1;66pkt 66fpkt"];
1658--1879[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="216.168.103.149"/>
      <filter src_ip="130.131.64.115"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.254.193.146"/>
    </slice>
    <from sec="989039492" usec="0"/>
    <to sec="989039509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.59.129.154"/>
    </slice>
    <from sec="989038806" usec="0"/>
    <to sec="989039461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.90.247.161"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
710[label="216.198.212.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
1264[label="216.198.212.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.198.212.162:1030, 167.223.10.156:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 23: (50%)&gt;];
}
710--1264[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.10.156" dst_port="23" src_ip="216.198.212.162" src_port="1030"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
742[label="85.130.28.163;s;76pkt 76fpkt", shape=diamond, color=yellow];
1265[label="85.130.28.163;77pkt 77fpkt", shape=pentagon, color=darkviolet];
1678[label="85.130.28.163;77pkt 77fpkt", shape=invtriangle, color=brown];
1890[label="85.130.28.163;77pkt 77fpkt", shape=invhouse, color=bisque];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.130.28.163:80, 157.96.202.38:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1438: (0.651466%)&lt;BR/&gt; 1437: (0.651466%)&lt;BR/&gt; 1431: (0.651466%)&lt;BR/&gt; 1430: (0.651466%)&gt;];
}
742--1265[label="0.986842;75pkt 75fpkt"];
742--1678[label="0.986842;75pkt 75fpkt"];
742--1890[label="0.986842;75pkt 75fpkt"];
1265--1678[label="1;77pkt 77fpkt"];
1265--1890[label="1;77pkt 77fpkt"];
1678--1890[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="157.96.202.38" src_ip="85.130.28.163" src_port="80"/>
    </slice>
    <from sec="989039399" usec="0"/>
    <to sec="989039683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.73.32.163"/>
    </slice>
    <from sec="989039211" usec="0"/>
    <to sec="989039682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
371[label="155.59.208.16;d;138pkt 138fpkt", shape=diamond, color=yellow];
422[label="216.122.204.195;d;91pkt 91fpkt", shape=diamond, color=yellow];
961[label="216.61.102.18;8pkt 8fpkt", shape=pentagon, color=darkviolet];
1107[label="221.161.147.82;40pkt 40fpkt", shape=pentagon, color=darkviolet];
1315[label="220.160.82.183;17pkt 17fpkt", shape=pentagon, color=darkviolet];
1398[label="200.168.51.214;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1506[label="216.61.102.18;9pkt 9fpkt", shape=invtriangle, color=brown];
1590[label="221.161.147.82;41pkt 41fpkt", shape=invtriangle, color=brown];
1701[label="220.160.82.183;17pkt 17fpkt", shape=invtriangle, color=brown];
1843[label="221.161.147.82;41pkt 41fpkt", shape=invhouse, color=bisque];
1905[label="220.160.82.183;17pkt 17fpkt", shape=invhouse, color=bisque];
1931[label="200.168.51.214;10pkt 10fpkt", shape=invhouse, color=bisque];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 155.59.208.16:*}[58.2278%]&lt;BR/&gt;{*:80, 216.122.204.195:*}[21.097%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.9095%)&lt;BR/&gt; 8000: (2.60181%)&lt;BR/&gt; 53: (2.14932%)&lt;BR/&gt; 32776: (1.47059%)&lt;BR/&gt; 0: (0.678733%)&gt;];
}
371--864[label="0.123188;17pkt 17fpkt"];
371--882[label="0.123188;17pkt 17fpkt"];
371--899[label="0.123188;17pkt 17fpkt"];
371--1107[label="1;40pkt 40fpkt"];
371--1280[label="1;15pkt 15fpkt"];
371--1315[label="0.352941;6pkt 6fpkt"];
371--1398[label="0.230769;3pkt 3fpkt"];
371--1590[label="1;41pkt 41fpkt"];
371--1701[label="0.352941;6pkt 6fpkt"];
371--1843[label="1;41pkt 41fpkt"];
371--1905[label="0.352941;6pkt 6fpkt"];
371--1931[label="0.2;2pkt 2fpkt"];
422--864[label="0.0879121;8pkt 8fpkt"];
422--882[label="0.0879121;8pkt 8fpkt"];
422--899[label="0.0879121;8pkt 8fpkt"];
422--961[label="1;8pkt 8fpkt"];
422--1293[label="0.047619;1pkt 1fpkt"];
422--1315[label="0.588235;10pkt 10fpkt"];
422--1398[label="0.230769;3pkt 3fpkt"];
422--1506[label="1;9pkt 9fpkt"];
422--1701[label="0.588235;10pkt 10fpkt"];
422--1905[label="0.588235;10pkt 10fpkt"];
422--1931[label="0.2;2pkt 2fpkt"];
961--1506[label="1;8pkt 8fpkt"];
1107--1590[label="1;40pkt 40fpkt"];
1107--1843[label="1;40pkt 40fpkt"];
1315--1701[label="1;17pkt 17fpkt"];
1315--1905[label="1;17pkt 17fpkt"];
1398--1931[label="1;10pkt 10fpkt"];
1590--1843[label="1;41pkt 41fpkt"];
1701--1905[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="155.59.208.16" src_port="80"/>
      <filter dst_ip="216.122.204.195" src_port="80"/>
    </slice>
    <from sec="989038804" usec="0"/>
    <to sec="989039672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.192.96.172"/>
    </slice>
    <from sec="989038986" usec="0"/>
    <to sec="989039184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.115.197.175"/>
    </slice>
    <from sec="989038804" usec="0"/>
    <to sec="989039515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.102.202.176"/>
    </slice>
    <from sec="989038820" usec="0"/>
    <to sec="989039682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.122.204.179"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.223.10.182"/>
    </slice>
    <from sec="989038806" usec="0"/>
    <to sec="989039681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.79134,1.69321,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
128[label="103.2.160.182;s;3pkt 3fpkt", shape=diamond, color=yellow];
322[label="157.96.152.210;d;8pkt 8fpkt", shape=diamond, color=yellow];
520[label="25.40.89.169;s;1pkt 1fpkt", shape=diamond, color=yellow];
787[label="25.40.89.169;s;1pkt 1fpkt", shape=hexagon, color=black];
1313[label="103.2.160.182;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 157.96.152.210:0}[37.5%]&lt;BR/&gt;{103.2.160.182:*, 157.96.152.210:6699}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (35.7143%)&lt;BR/&gt; 0: (21.4286%)&lt;BR/&gt; 1440: (10.7143%)&lt;BR/&gt; 1066: (10.7143%)&lt;BR/&gt; 1287: (7.14286%)&gt;];
}
128--322[label="1;3pkt 3fpkt"];
128--1313[label="1;1pkt 1fpkt"];
322--520[label="1;1pkt 1fpkt"];
322--787[label="1;1pkt 1fpkt"];
322--1313[label="1;1pkt 1fpkt"];
520--787[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="157.96.152.210" dst_port="6699" src_ip="103.2.160.182"/>
      <filter dst_ip="157.96.152.210"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
522[label="130.202.139.47;d;62pkt 62fpkt", shape=diamond, color=yellow];
694[label="196.36.200.204;s;7pkt 7fpkt", shape=diamond, color=yellow];
1068[label="196.242.164.63;68pkt 68fpkt", shape=pentagon, color=darkviolet];
1317[label="196.246.73.184;7pkt 7fpkt", shape=pentagon, color=darkviolet];
1569[label="196.242.164.63;67pkt 67fpkt", shape=invtriangle, color=brown];
1702[label="196.246.73.184;7pkt 7fpkt", shape=invtriangle, color=brown];
1906[label="196.246.73.184;8pkt 8fpkt", shape=invhouse, color=bisque];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.242.164.63:80, 130.202.139.47:*}[70.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6726%)&lt;BR/&gt; 1755: (1.32743%)&lt;BR/&gt; 1128: (0.884956%)&lt;BR/&gt; 1184: (0.663717%)&lt;BR/&gt; 1181: (0.663717%)&gt;];
}
522--694[label="0.142857;1pkt 1fpkt"];
522--1068[label="0.741935;46pkt 46fpkt"];
522--1317[label="0.142857;1pkt 1fpkt"];
522--1569[label="0.725806;45pkt 45fpkt"];
522--1702[label="0.142857;1pkt 1fpkt"];
522--1906[label="0.25;2pkt 2fpkt"];
1068--1569[label="1;67pkt 67fpkt"];
1317--1702[label="1;7pkt 7fpkt"];
1317--1906[label="1;7pkt 7fpkt"];
1702--1906[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.139.47" src_ip="196.242.164.63" src_port="80"/>
    </slice>
    <from sec="989039211" usec="0"/>
    <to sec="989039664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.223.10.185"/>
    </slice>
    <from sec="989038812" usec="0"/>
    <to sec="989039664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00365,1.69547,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
114[label="160.90.40.214;d;25pkt 25fpkt", shape=diamond, color=yellow];
115[label="200.5.86.193;s;6pkt 6fpkt", shape=diamond, color=yellow];
808[label="160.90.40.214;d;25pkt 25fpkt", shape=hexagon, color=black];
1058[label="198.67.18.56;19pkt 19fpkt", shape=pentagon, color=darkviolet];
1337[label="200.5.86.193;6pkt 6fpkt", shape=pentagon, color=darkviolet];
1560[label="198.67.18.56;18pkt 18fpkt", shape=invtriangle, color=brown];
1824[label="198.67.18.56;18pkt 18fpkt", shape=invhouse, color=bisque];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.67.18.56:80, 160.90.40.214:*}[70.3704%]&lt;BR/&gt;{200.5.86.193:*, 160.90.40.214:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.0342%)&lt;BR/&gt; 7502: (5.98291%)&lt;BR/&gt; 6970: (5.98291%)&lt;BR/&gt; 1081: (2.13675%)&lt;BR/&gt; 1080: (2.13675%)&gt;];
}
114--115[label="1;6pkt 6fpkt"];
114--808[label="1;25pkt 25fpkt"];
114--864[label="0.16;4pkt 4fpkt"];
114--882[label="0.16;4pkt 4fpkt"];
114--899[label="0.16;4pkt 4fpkt"];
114--1058[label="0.894737;17pkt 17fpkt"];
114--1337[label="1;6pkt 6fpkt"];
114--1560[label="0.888889;16pkt 16fpkt"];
114--1824[label="0.888889;16pkt 16fpkt"];
115--808[label="1;6pkt 6fpkt"];
115--1337[label="1;6pkt 6fpkt"];
808--864[label="0.16;4pkt 4fpkt"];
808--882[label="0.16;4pkt 4fpkt"];
808--899[label="0.16;4pkt 4fpkt"];
808--1058[label="0.894737;17pkt 17fpkt"];
808--1337[label="1;6pkt 6fpkt"];
808--1560[label="0.888889;16pkt 16fpkt"];
808--1824[label="0.888889;16pkt 16fpkt"];
1058--1560[label="1;18pkt 18fpkt"];
1058--1824[label="1;18pkt 18fpkt"];
1560--1824[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="160.90.40.214" src_ip="200.5.86.193"/>
      <filter dst_ip="160.90.40.214" src_ip="198.67.18.56" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
301[label="210.12.221.124;d;93pkt 93fpkt", shape=diamond, color=yellow];
302[label="167.223.7.196;s;94pkt 94fpkt", shape=diamond, color=yellow];
1344[label="167.223.7.196;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1716[label="167.223.7.196;99pkt 99fpkt", shape=invtriangle, color=brown];
1915[label="167.223.7.196;99pkt 99fpkt", shape=invhouse, color=bisque];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.223.7.196:*, 210.12.221.124:10080}[98%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10080: (49.0933%)&lt;BR/&gt; 3130: (1.03627%)&lt;BR/&gt; 2694: (0.647668%)&lt;BR/&gt; 2721: (0.518135%)&lt;BR/&gt; 2718: (0.518135%)&gt;];
}
301--302[label="1;93pkt 93fpkt"];
301--1344[label="1;1pkt 1fpkt"];
301--1716[label="0.989247;92pkt 92fpkt"];
301--1915[label="0.989247;92pkt 92fpkt"];
302--1344[label="1;1pkt 1fpkt"];
302--1716[label="0.989362;93pkt 93fpkt"];
302--1915[label="0.989362;93pkt 93fpkt"];
1344--1716[label="1;1pkt 1fpkt"];
1344--1915[label="1;1pkt 1fpkt"];
1716--1915[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_ip="210.12.221.124" dst_port="10080" src_ip="167.223.7.196"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.61.34.207"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="116.177.134.212"/>
    </slice>
    <from sec="989039398" usec="0"/>
    <to sec="989039666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.203.93.213"/>
    </slice>
    <from sec="989038801" usec="0"/>
    <to sec="989038911" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.236.212.213"/>
    </slice>
    <from sec="989038801" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.90.40.214"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.72.201.219"/>
    </slice>
    <from sec="989038810" usec="0"/>
    <to sec="989039683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.72.196.221"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,053,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.0.101.225"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576123,1.72015,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
739[label="221.12.16.226;s;10pkt 10fpkt", shape=diamond, color=yellow];
1424[label="221.12.16.226;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1756[label="221.12.16.226;11pkt 11fpkt", shape=invtriangle, color=brown];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.12.16.226:80, 160.90.190.29:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1865: (4.6875%)&lt;BR/&gt; 1864: (4.6875%)&lt;BR/&gt; 1863: (4.6875%)&lt;BR/&gt; 1862: (4.6875%)&gt;];
}
739--1424[label="1;10pkt 10fpkt"];
739--1756[label="1;10pkt 10fpkt"];
1424--1756[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="160.90.190.29" src_ip="221.12.16.226" src_port="80"/>
    </slice>
    <from sec="989039145" usec="0"/>
    <to sec="989039651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.241.150.226"/>
    </slice>
    <from sec="989038860" usec="0"/>
    <to sec="989039666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.169.131.228"/>
    </slice>
    <from sec="989038875" usec="0"/>
    <to sec="989039297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.85.178.229"/>
    </slice>
    <from sec="989039006" usec="0"/>
    <to sec="989039606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576123,1.72015,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
56[label="85.162.162.230;s;2pkt 2fpkt", shape=diamond, color=yellow];
1442[label="85.162.162.230;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1765[label="85.162.162.230;3pkt 3fpkt", shape=invtriangle, color=brown];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.162.162.230:27015, 216.115.217.19:34581}[33.3333%]&lt;BR/&gt;{85.162.162.230:27015, 216.115.217.19:47269}[33.3333%]&lt;BR/&gt;{85.162.162.230:27015, 216.115.217.19:47272}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27015: (50%)&lt;BR/&gt; 47272: (18.75%)&lt;BR/&gt; 47269: (18.75%)&lt;BR/&gt; 34581: (12.5%)&gt;];
}
56--1442[label="1;2pkt 2fpkt"];
56--1765[label="1;2pkt 2fpkt"];
1442--1765[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="216.115.217.19" dst_port="47272" src_ip="85.162.162.230" src_port="27015"/>
      <filter dst_ip="216.115.217.19" dst_port="47269" src_ip="85.162.162.230" src_port="27015"/>
      <filter dst_ip="216.115.217.19" dst_port="34581" src_ip="85.162.162.230" src_port="27015"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.112.141.232"/>
    </slice>
    <from sec="989039295" usec="0"/>
    <to sec="989039365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468113,1.71939,501,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
68[label="220.62.169.233;s;3pkt 3fpkt", shape=diamond, color=yellow];
1450[label="220.62.169.233;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.62.169.233:63050, 167.223.33.137:21}[33.3333%]&lt;BR/&gt;{220.62.169.233:64504, 167.223.33.137:21}[33.3333%]&lt;BR/&gt;{220.62.169.233:64517, 167.223.33.137:21}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 64517: (16.6667%)&lt;BR/&gt; 64504: (16.6667%)&lt;BR/&gt; 63050: (16.6667%)&gt;];
}
68--593[label="1;3pkt 3fpkt"];
68--1450[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.33.137" dst_port="21" src_ip="220.62.169.233" src_port="64517"/>
      <filter dst_ip="167.223.33.137" dst_port="21" src_ip="220.62.169.233" src_port="64504"/>
      <filter dst_ip="167.223.33.137" dst_port="21" src_ip="220.62.169.233" src_port="63050"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="157.96.201.235"/>
    </slice>
    <from sec="989039207" usec="0"/>
    <to sec="989039298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.100.24.238"/>
    </slice>
    <from sec="989038843" usec="0"/>
    <to sec="989038952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.187.122.244"/>
    </slice>
    <from sec="989038806" usec="0"/>
    <to sec="989039094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.101.224.245"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.469523,1.79015,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.227.64.246"/>
    </slice>
    <from sec="989039255" usec="0"/>
    <to sec="989039683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
158[label="196.242.181.254;s;15pkt 15fpkt", shape=diamond, color=yellow];
490[label="130.202.89.228;d;20pkt 20fpkt", shape=diamond, color=yellow];
1478[label="196.242.181.254;14pkt 14fpkt", shape=pentagon, color=darkviolet];
1784[label="196.242.181.254;14pkt 14fpkt", shape=invtriangle, color=brown];
1952[label="196.242.181.254;14pkt 14fpkt", shape=invhouse, color=bisque];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.242.181.254:80, 130.202.89.228:*}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0519%)&lt;BR/&gt; 1184: (3.24675%)&lt;BR/&gt; 1183: (3.24675%)&lt;BR/&gt; 1182: (3.24675%)&lt;BR/&gt; 1181: (3.24675%)&gt;];
}
158--490[label="1;15pkt 15fpkt"];
158--1478[label="1;14pkt 14fpkt"];
158--1784[label="1;14pkt 14fpkt"];
158--1952[label="1;14pkt 14fpkt"];
490--1478[label="1;14pkt 14fpkt"];
490--1784[label="1;14pkt 14fpkt"];
490--1952[label="1;14pkt 14fpkt"];
1478--1784[label="1;14pkt 14fpkt"];
1478--1952[label="1;14pkt 14fpkt"];
1784--1952[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.89.228" src_ip="196.242.181.254" src_port="80"/>
    </slice>
    <from sec="989038801" usec="0"/>
    <to sec="989039571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
916[label="130.202.211.0;48pkt 48fpkt", shape=pentagon, color=darkviolet];
1482[label="130.202.211.0;49pkt 49fpkt", shape=invtriangle, color=brown];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.202.211.0:*, 199.9.37.200:80}[42.8571%]&lt;BR/&gt;{130.202.211.0:*, 220.216.29.35:80}[34.6939%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.8454%)&lt;BR/&gt; 0: (10.3093%)&lt;BR/&gt; 49246: (1.03093%)&lt;BR/&gt; 49245: (1.03093%)&lt;BR/&gt; 49244: (1.03093%)&gt;];
}
916--1482[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_ip="199.9.37.200" dst_port="80" src_ip="130.202.211.0"/>
      <filter dst_ip="220.216.29.35" dst_port="80" src_ip="130.202.211.0"/>
    </slice>
    <from sec="989038839" usec="0"/>
    <to sec="989038935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
928[label="200.88.100.4;22pkt 22fpkt", shape=pentagon, color=darkviolet];
1489[label="200.88.100.4;21pkt 21fpkt", shape=invtriangle, color=brown];
1791[label="200.88.100.4;21pkt 21fpkt", shape=invhouse, color=bisque];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.88.100.4:80, 216.162.216.63:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1499: (2.34375%)&lt;BR/&gt; 1498: (2.34375%)&lt;BR/&gt; 1497: (2.34375%)&lt;BR/&gt; 1496: (2.34375%)&gt;];
}
928--1489[label="1;21pkt 21fpkt"];
928--1791[label="1;21pkt 21fpkt"];
1489--1791[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="216.162.216.63" src_ip="200.88.100.4" src_port="80"/>
    </slice>
    <from sec="989039540" usec="0"/>
    <to sec="989039570" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6371,1.82693,002,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.35.103.5"/>
    </slice>
    <from sec="989038889" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
931[label="216.162.194.5;22pkt 22fpkt", shape=pentagon, color=darkviolet];
1491[label="216.162.194.5;22pkt 22fpkt", shape=invtriangle, color=brown];
1793[label="216.162.194.5;21pkt 21fpkt", shape=invhouse, color=bisque];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.162.194.5:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2807: (2.30769%)&lt;BR/&gt; 2803: (2.30769%)&lt;BR/&gt; 2799: (2.30769%)&lt;BR/&gt; 2779: (2.30769%)&gt;];
}
931--1491[label="1;22pkt 22fpkt"];
931--1793[label="1;21pkt 21fpkt"];
1491--1793[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="216.162.194.5"/>
    </slice>
    <from sec="989039396" usec="0"/>
    <to sec="989039683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6371,1.82693,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.178.192.8"/>
    </slice>
    <from sec="989038803" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576123,1.72015,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
314[label="216.73.32.160;d;67pkt 67fpkt", shape=diamond, color=yellow];
431[label="157.96.200.149;d;137pkt 137fpkt", shape=diamond, color=yellow];
485[label="198.167.3.12;s;160pkt 160fpkt", shape=diamond, color=yellow];
1396[label="197.192.18.214;25pkt 25fpkt", shape=pentagon, color=darkviolet];
1743[label="197.192.18.214;25pkt 25fpkt", shape=invtriangle, color=brown];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 157.96.200.149:*}[39.2216%]&lt;BR/&gt;{198.167.3.12:80, 155.59.230.136:*}[28.7425%]&lt;BR/&gt;{*:80, 216.73.32.160:*}[20.0599%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2754%)&lt;BR/&gt; 21: (0.483092%)&lt;BR/&gt; 61170: (0.362319%)&lt;BR/&gt; 61169: (0.362319%)&lt;BR/&gt; 61167: (0.362319%)&gt;];
}
314--485[label="0.19403;13pkt 13fpkt"];
314--864[label="0.119403;8pkt 8fpkt"];
314--882[label="0.119403;8pkt 8fpkt"];
314--899[label="0.119403;8pkt 8fpkt"];
314--945[label="0.19403;13pkt 13fpkt"];
314--952[label="0.19403;13pkt 13fpkt"];
314--1325[label="0.0789474;3pkt 3fpkt"];
314--1501[label="0.149254;10pkt 10fpkt"];
314--1707[label="0.0789474;3pkt 3fpkt"];
431--485[label="0.124088;17pkt 17fpkt"];
431--586[label="1;2pkt 2fpkt"];
431--864[label="0.0510949;7pkt 7fpkt"];
431--882[label="0.0510949;7pkt 7fpkt"];
431--899[label="0.0510949;7pkt 7fpkt"];
431--923[label="1;2pkt 2fpkt"];
431--945[label="0.124088;17pkt 17fpkt"];
431--1288[label="0.0571429;2pkt 2fpkt"];
431--1325[label="0.105263;4pkt 4fpkt"];
431--1375[label="0.08;2pkt 2fpkt"];
431--1396[label="1;25pkt 25fpkt"];
431--1468[label="1;6pkt 6fpkt"];
431--1501[label="0.124088;17pkt 17fpkt"];
431--1707[label="0.105263;4pkt 4fpkt"];
431--1743[label="1;25pkt 25fpkt"];
485--775[label="0.01875;3pkt 3fpkt"];
485--858[label="0.01875;3pkt 3fpkt"];
485--945[label="0.99375;159pkt 159fpkt"];
485--1501[label="0.98125;157pkt 157fpkt"];
1396--1743[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="157.96.200.149" src_port="80"/>
      <filter dst_ip="216.73.32.160" src_port="80"/>
      <filter dst_ip="155.59.230.136" src_ip="198.167.3.12" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12939,1.70319,999,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
8[label="222.164.137.108s;2pkt 2fpkt", shape=rectangle, color=red];
120[label="222.164.137.108;s;2354pkt 2354fpkt", shape=diamond, color=yellow];
724[label="167.223.1.105;d;51pkt 51fpkt", shape=diamond, color=yellow];
968[label="222.75.136.21;22pkt 22fpkt", shape=pentagon, color=darkviolet];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.164.137.108:3128, 167.223.0.68:*}[67.7379%]&lt;BR/&gt;{222.164.137.108:3128, 167.223.1.115:*}[20.0247%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (48.2091%)&lt;BR/&gt; 80: (1.02923%)&lt;BR/&gt; 53: (0.514615%)&lt;BR/&gt; 3130: (0.370523%)&lt;BR/&gt; 3507: (0.0617538%)&gt;];
}
8--100[label="0.5;1pkt 1fpkt"];
8--120[label="1;2pkt 2fpkt"];
8--121[label="0.5;1pkt 1fpkt"];
120--121[label="0.35801;295pkt 295fpkt"];
120--131[label="0.107639;31pkt 31fpkt"];
120--134[label="0.183521;98pkt 98fpkt"];
120--628[label="0.0310559;5pkt 5fpkt"];
120--872[label="0.000424809;1pkt 1fpkt"];
120--889[label="0.000424809;1pkt 1fpkt"];
120--905[label="0.000424809;1pkt 1fpkt"];
724--871[label="0.0196078;1pkt 1fpkt"];
724--872[label="0.0588235;3pkt 3fpkt"];
724--884[label="0.0980392;5pkt 5fpkt"];
724--888[label="0.0196078;1pkt 1fpkt"];
724--889[label="0.0588235;3pkt 3fpkt"];
724--901[label="0.0980392;5pkt 5fpkt"];
724--904[label="0.0196078;1pkt 1fpkt"];
724--905[label="0.0588235;3pkt 3fpkt"];
724--1281[label="0.272727;6pkt 6fpkt"];
724--1687[label="0.272727;6pkt 6fpkt"];
724--1896[label="0.285714;6pkt 6fpkt"];
968--1511[label="1;22pkt 22fpkt"];
968--1803[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.0.68" src_ip="222.164.137.108" src_port="3128"/>
      <filter dst_ip="167.223.1.115" src_ip="222.164.137.108" src_port="3128"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
963[label="155.59.208.19;136pkt 136fpkt", shape=pentagon, color=darkviolet];
1507[label="155.59.208.19;135pkt 135fpkt", shape=invtriangle, color=brown];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.59.208.19:*, 80.148.150.188:8450}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8450: (50%)&lt;BR/&gt; 5021: (0.369004%)&lt;BR/&gt; 5020: (0.369004%)&lt;BR/&gt; 5019: (0.369004%)&lt;BR/&gt; 5018: (0.369004%)&gt;];
}
963--1507[label="1;135pkt 135fpkt"];
</description>
    <slice>
      <filter dst_ip="80.148.150.188" dst_port="8450" src_ip="155.59.208.19"/>
    </slice>
    <from sec="989038811" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
965[label="160.90.195.20;32pkt 32fpkt", shape=pentagon, color=darkviolet];
1508[label="160.90.195.20;31pkt 31fpkt", shape=invtriangle, color=brown];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.90.195.20:*, 200.131.70.99:80}[31.25%]&lt;BR/&gt;{160.90.195.20:*, 198.168.44.173:80}[28.125%]&lt;BR/&gt;{160.90.195.20:0, *:0}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.8889%)&lt;BR/&gt; 0: (22.2222%)&lt;BR/&gt; 49191: (1.5873%)&lt;BR/&gt; 49190: (1.5873%)&lt;BR/&gt; 49189: (1.5873%)&gt;];
}
965--1508[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="200.131.70.99" dst_port="80" src_ip="160.90.195.20"/>
      <filter dst_ip="198.168.44.173" dst_port="80" src_ip="160.90.195.20"/>
      <filter src_ip="160.90.195.20"/>
    </slice>
    <from sec="989039291" usec="0"/>
    <to sec="989039624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_264{
style=filled;
color=gray75;
967[label="160.90.222.20;24pkt 24fpkt", shape=pentagon, color=darkviolet];
1510[label="160.90.222.20;24pkt 24fpkt", shape=invtriangle, color=brown];
stat264[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.90.222.20:*, 222.41.161.111:80}[66.6667%]&lt;BR/&gt;{160.90.222.20:*, 222.100.190.215:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.8333%)&lt;BR/&gt; 0: (8.33333%)&lt;BR/&gt; 2023: (2.08333%)&lt;BR/&gt; 2022: (2.08333%)&lt;BR/&gt; 2021: (2.08333%)&gt;];
}
967--1510[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="222.41.161.111" dst_port="80" src_ip="160.90.222.20"/>
      <filter dst_ip="222.100.190.215" dst_port="80" src_ip="160.90.222.20"/>
    </slice>
    <from sec="989039418" usec="0"/>
    <to sec="989039460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
972[label="167.223.21.24;20pkt 20fpkt", shape=pentagon, color=darkviolet];
1514[label="167.223.21.24;19pkt 19fpkt", shape=invtriangle, color=brown];
1805[label="167.223.21.24;20pkt 20fpkt", shape=invhouse, color=bisque];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.223.21.24:*, 103.35.208.245:20}[40%]&lt;BR/&gt;{167.223.21.24:*, 200.134.11.96:20}[30%]&lt;BR/&gt;{167.223.21.24:*, 103.35.208.245:21}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (35.5932%)&lt;BR/&gt; 21: (14.4068%)&lt;BR/&gt; 2820: (2.54237%)&lt;BR/&gt; 2819: (2.54237%)&lt;BR/&gt; 2818: (2.54237%)&gt;];
}
972--1514[label="1;19pkt 19fpkt"];
972--1805[label="1;20pkt 20fpkt"];
1514--1805[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="103.35.208.245" dst_port="20" src_ip="167.223.21.24"/>
      <filter dst_ip="103.35.208.245" dst_port="21" src_ip="167.223.21.24"/>
      <filter dst_ip="200.134.11.96" dst_port="20" src_ip="167.223.21.24"/>
    </slice>
    <from sec="989038803" usec="0"/>
    <to sec="989039682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
975[label="200.235.73.24;8pkt 8fpkt", shape=pentagon, color=darkviolet];
1516[label="200.235.73.24;8pkt 8fpkt", shape=invtriangle, color=brown];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.235.73.24:80, 216.162.216.63:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1511: (6.25%)&lt;BR/&gt; 1510: (6.25%)&lt;BR/&gt; 1509: (6.25%)&lt;BR/&gt; 1508: (6.25%)&gt;];
}
975--1516[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="216.162.216.63" src_ip="200.235.73.24" src_port="80"/>
    </slice>
    <from sec="989039635" usec="0"/>
    <to sec="989039676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636061,1.75765,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
666[label="157.96.193.27;s;289pkt 289fpkt", shape=diamond, color=yellow];
1519[label="157.96.193.27;321pkt 321fpkt", shape=invtriangle, color=brown];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.96.193.27:35441, *:53}[63.2399%]&lt;BR/&gt;{157.96.193.27:53, *:*}[35.8255%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.7705%)&lt;BR/&gt; 35441: (31.4754%)&lt;BR/&gt; 1024: (0.983607%)&lt;BR/&gt; 0: (0.655738%)&lt;BR/&gt; 1025: (0.409836%)&gt;];
}
666--870[label="0.0242215;7pkt 7fpkt"];
666--871[label="0.131488;38pkt 38fpkt"];
666--876[label="0.083045;24pkt 24fpkt"];
666--887[label="0.0242215;7pkt 7fpkt"];
666--888[label="0.131488;38pkt 38fpkt"];
666--893[label="0.083045;24pkt 24fpkt"];
666--903[label="0.0242215;7pkt 7fpkt"];
666--904[label="0.131488;38pkt 38fpkt"];
666--909[label="0.083045;24pkt 24fpkt"];
666--982[label="1;289pkt 289fpkt"];
666--1519[label="1;289pkt 289fpkt"];
</description>
    <slice>
      <filter src_ip="157.96.193.27" src_port="53"/>
      <filter dst_port="53" src_ip="157.96.193.27" src_port="35441"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
580[label="155.59.189.253;d;23pkt 23fpkt", shape=diamond, color=yellow];
1007[label="164.226.59.37;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1529[label="164.226.59.37;5pkt 5fpkt", shape=invtriangle, color=brown];
1809[label="164.226.59.37;5pkt 5fpkt", shape=invhouse, color=bisque];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.226.59.37:80, 155.59.189.253:*}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2973%)&lt;BR/&gt; 1521: (5.40541%)&lt;BR/&gt; 1520: (5.40541%)&lt;BR/&gt; 1519: (5.40541%)&lt;BR/&gt; 1510: (5.40541%)&gt;];
}
580--864[label="0.173913;4pkt 4fpkt"];
580--882[label="0.173913;4pkt 4fpkt"];
580--899[label="0.173913;4pkt 4fpkt"];
580--1007[label="1;4pkt 4fpkt"];
580--1529[label="1;5pkt 5fpkt"];
580--1809[label="1;5pkt 5fpkt"];
1007--1529[label="1;4pkt 4fpkt"];
1007--1809[label="1;4pkt 4fpkt"];
1529--1809[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="155.59.189.253" src_ip="164.226.59.37" src_port="80"/>
    </slice>
    <from sec="989038893" usec="0"/>
    <to sec="989039404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
1008[label="147.89.60.38;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1530[label="147.89.60.38;1pkt 1fpkt", shape=invtriangle, color=brown];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.89.60.38:0, 167.223.0.81:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1008--1530[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.0.81" src_ip="147.89.60.38"/>
    </slice>
    <from sec="989038813" usec="0"/>
    <to sec="989039149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6371,1.82693,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.97.154.39"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6371,1.82693,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.130.13.41"/>
    </slice>
    <from sec="989038803" usec="0"/>
    <to sec="989039682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
1054[label="70.88.99.54;62pkt 62fpkt", shape=pentagon, color=darkviolet];
1557[label="70.88.99.54;63pkt 63fpkt", shape=invtriangle, color=brown];
1821[label="70.88.99.54;62pkt 62fpkt", shape=invhouse, color=bisque];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.88.99.54:*, 155.59.213.60:*}[33.3333%]&lt;BR/&gt;{70.88.99.54:*, 157.1.131.98:*}[33.3333%]&lt;BR/&gt;{70.88.99.54:*, 157.117.24.182:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60008: (2.40642%)&lt;BR/&gt; 39168: (2.40642%)&lt;BR/&gt; 33567: (2.40642%)&lt;BR/&gt; 31337: (2.40642%)&lt;BR/&gt; 29369: (2.40642%)&gt;];
}
1054--1557[label="1;62pkt 62fpkt"];
1054--1821[label="1;62pkt 62fpkt"];
1557--1821[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="157.117.24.182" src_ip="70.88.99.54"/>
      <filter dst_ip="157.1.131.98" src_ip="70.88.99.54"/>
      <filter dst_ip="155.59.213.60" src_ip="70.88.99.54"/>
    </slice>
    <from sec="989038821" usec="0"/>
    <to sec="989039087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6371,1.82693,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.14.247.58"/>
    </slice>
    <from sec="989038801" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
1066[label="102.69.10.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1566[label="102.69.10.61;1pkt 1fpkt", shape=invtriangle, color=brown];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{102.69.10.61:80, 160.90.43.211:1395}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1395: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1066--1566[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.90.43.211" dst_port="1395" src_ip="102.69.10.61" src_port="80"/>
    </slice>
    <from sec="989038801" usec="0"/>
    <to sec="989038859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
1070[label="130.202.36.64;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1570[label="130.202.36.64;4pkt 4fpkt", shape=invtriangle, color=brown];
1831[label="130.202.36.64;5pkt 5fpkt", shape=invhouse, color=bisque];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.202.36.64:8000, 25.102.54.238:1248}[20%]&lt;BR/&gt;{130.202.36.64:8000, 25.102.54.238:1326}[20%]&lt;BR/&gt;{130.202.36.64:8000, 128.2.4.59:51145}[20%]&lt;BR/&gt;{130.202.36.64:8000, 128.2.4.59:51152}[20%]&lt;BR/&gt;{130.202.36.64:8000, 128.2.4.59:53290}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (50%)&lt;BR/&gt; 53290: (11.5385%)&lt;BR/&gt; 51152: (11.5385%)&lt;BR/&gt; 51145: (11.5385%)&lt;BR/&gt; 1326: (11.5385%)&gt;];
}
1070--1570[label="1;4pkt 4fpkt"];
1070--1831[label="1;4pkt 4fpkt"];
1570--1831[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="128.2.4.59" dst_port="53290" src_ip="130.202.36.64" src_port="8000"/>
      <filter dst_ip="128.2.4.59" dst_port="51152" src_ip="130.202.36.64" src_port="8000"/>
      <filter dst_ip="128.2.4.59" dst_port="51145" src_ip="130.202.36.64" src_port="8000"/>
      <filter dst_ip="25.102.54.238" dst_port="1326" src_ip="130.202.36.64" src_port="8000"/>
      <filter dst_ip="25.102.54.238" dst_port="1248" src_ip="130.202.36.64" src_port="8000"/>
    </slice>
    <from sec="989039050" usec="0"/>
    <to sec="989039646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6371,1.82693,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="223.74.108.64"/>
    </slice>
    <from sec="989039573" usec="0"/>
    <to sec="989039668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6371,1.82693,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.50.73.69"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
1094[label="222.103.79.78;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1584[label="222.103.79.78;4pkt 4fpkt", shape=invtriangle, color=brown];
1840[label="222.103.79.78;4pkt 4fpkt", shape=invhouse, color=bisque];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.103.79.78:80, 130.202.212.95:29056}[20%]&lt;BR/&gt;{222.103.79.78:80, 130.202.212.95:29057}[20%]&lt;BR/&gt;{222.103.79.78:80, 130.202.212.95:29058}[20%]&lt;BR/&gt;{222.103.79.78:80, 130.202.212.95:29059}[20%]&lt;BR/&gt;{222.103.79.78:80, 130.202.212.95:29060}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29060: (11.5385%)&lt;BR/&gt; 29059: (11.5385%)&lt;BR/&gt; 29058: (11.5385%)&lt;BR/&gt; 29057: (11.5385%)&gt;];
}
1094--1584[label="1;4pkt 4fpkt"];
1094--1840[label="1;4pkt 4fpkt"];
1584--1840[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.212.95" dst_port="29060" src_ip="222.103.79.78" src_port="80"/>
      <filter dst_ip="130.202.212.95" dst_port="29059" src_ip="222.103.79.78" src_port="80"/>
      <filter dst_ip="130.202.212.95" dst_port="29058" src_ip="222.103.79.78" src_port="80"/>
      <filter dst_ip="130.202.212.95" dst_port="29057" src_ip="222.103.79.78" src_port="80"/>
      <filter dst_ip="130.202.212.95" dst_port="29056" src_ip="222.103.79.78" src_port="80"/>
    </slice>
    <from sec="989039423" usec="0"/>
    <to sec="989039427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576123,1.72015,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_279{
style=filled;
color=gray75;
309[label="217.22.126.234;d;163pkt 163fpkt", shape=diamond, color=yellow];
1106[label="198.172.144.82;83pkt 83fpkt", shape=pentagon, color=darkviolet];
1589[label="198.172.144.82;83pkt 83fpkt", shape=invtriangle, color=brown];
stat279[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 217.22.126.234:6667}[39.0533%]&lt;BR/&gt;{198.172.144.82:1080, 217.22.126.234:*}[32.5444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (25.6839%)&lt;BR/&gt; 6667: (18.2371%)&lt;BR/&gt; 113: (4.55927%)&lt;BR/&gt; 39241: (0.455927%)&lt;BR/&gt; 39240: (0.455927%)&gt;];
}
309--1106[label="0.927711;77pkt 77fpkt"];
309--1589[label="0.927711;77pkt 77fpkt"];
1106--1589[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter dst_ip="217.22.126.234" dst_port="6667"/>
      <filter dst_ip="217.22.126.234" src_ip="198.172.144.82" src_port="1080"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
1113[label="155.59.224.87;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1592[label="155.59.224.87;4pkt 4fpkt", shape=invtriangle, color=brown];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.59.224.87:1904, 24.114.71.126:80}[25%]&lt;BR/&gt;{155.59.224.87:1905, 24.114.71.126:80}[25%]&lt;BR/&gt;{155.59.224.87:1906, 24.114.71.126:80}[25%]&lt;BR/&gt;{155.59.224.87:1907, 24.114.71.126:443}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 1907: (12.5%)&lt;BR/&gt; 1906: (12.5%)&lt;BR/&gt; 1905: (12.5%)&lt;BR/&gt; 1904: (12.5%)&gt;];
}
1113--1592[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="24.114.71.126" dst_port="443" src_ip="155.59.224.87" src_port="1907"/>
      <filter dst_ip="24.114.71.126" dst_port="80" src_ip="155.59.224.87" src_port="1906"/>
      <filter dst_ip="24.114.71.126" dst_port="80" src_ip="155.59.224.87" src_port="1905"/>
      <filter dst_ip="24.114.71.126" dst_port="80" src_ip="155.59.224.87" src_port="1904"/>
    </slice>
    <from sec="989039601" usec="0"/>
    <to sec="989039638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_281{
style=filled;
color=gray75;
1114[label="150.151.239.87;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1593[label="150.151.239.87;3pkt 3fpkt", shape=invtriangle, color=brown];
1845[label="150.151.239.87;3pkt 3fpkt", shape=invhouse, color=bisque];
stat281[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.151.239.87:0, 216.122.203.39:0}[33.3333%]&lt;BR/&gt;{150.151.239.87:0, 216.122.202.43:0}[33.3333%]&lt;BR/&gt;{150.151.239.87:0, 216.122.201.109:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1114--1593[label="1;3pkt 3fpkt"];
1114--1845[label="1;3pkt 3fpkt"];
1593--1845[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="216.122.201.109" src_ip="150.151.239.87"/>
      <filter dst_ip="216.122.202.43" src_ip="150.151.239.87"/>
      <filter dst_ip="216.122.203.39" src_ip="150.151.239.87"/>
    </slice>
    <from sec="989038805" usec="0"/>
    <to sec="989039677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
1116[label="198.118.90.88;8pkt 8fpkt", shape=pentagon, color=darkviolet];
1595[label="198.118.90.88;8pkt 8fpkt", shape=invtriangle, color=brown];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.118.90.88:25, 167.223.1.137:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 1831: (6.25%)&lt;BR/&gt; 1817: (6.25%)&lt;BR/&gt; 1814: (6.25%)&lt;BR/&gt; 1805: (6.25%)&gt;];
}
1116--1595[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.1.137" src_ip="198.118.90.88" src_port="25"/>
    </slice>
    <from sec="989039078" usec="0"/>
    <to sec="989039264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
386[label="130.202.219.88;s;138pkt 138fpkt", shape=diamond, color=yellow];
509[label="217.55.242.173;d;193pkt 193fpkt", shape=diamond, color=yellow];
1118[label="130.202.219.88;141pkt 141fpkt", shape=pentagon, color=darkviolet];
1597[label="130.202.219.88;141pkt 141fpkt", shape=invtriangle, color=brown];
1847[label="130.202.219.88;140pkt 140fpkt", shape=invhouse, color=bisque];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.122.28.76:80, 217.55.242.173:*}[44.5693%]&lt;BR/&gt;{130.202.219.88:80, 217.55.242.173:*}[28.0899%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7344%)&lt;BR/&gt; 0: (0.531208%)&lt;BR/&gt; 49058: (0.332005%)&lt;BR/&gt; 48690: (0.332005%)&lt;BR/&gt; 48689: (0.332005%)&gt;];
}
386--509[label="0.485507;67pkt 67fpkt"];
386--864[label="0.0362319;5pkt 5fpkt"];
386--882[label="0.0362319;5pkt 5fpkt"];
386--899[label="0.0362319;5pkt 5fpkt"];
386--1118[label="1;138pkt 138fpkt"];
386--1597[label="1;138pkt 138fpkt"];
386--1847[label="0.992754;137pkt 137fpkt"];
509--571[label="0.170732;7pkt 7fpkt"];
509--640[label="0.61658;119pkt 119fpkt"];
509--830[label="0.832168;119pkt 119fpkt"];
509--864[label="0.0518135;10pkt 10fpkt"];
509--882[label="0.0518135;10pkt 10fpkt"];
509--899[label="0.0518135;10pkt 10fpkt"];
509--1118[label="0.475177;67pkt 67fpkt"];
509--1597[label="0.475177;67pkt 67fpkt"];
509--1847[label="0.478571;67pkt 67fpkt"];
1118--1597[label="1;141pkt 141fpkt"];
1118--1847[label="1;140pkt 140fpkt"];
1597--1847[label="1;140pkt 140fpkt"];
</description>
    <slice>
      <filter dst_ip="217.55.242.173" src_ip="130.202.219.88" src_port="80"/>
      <filter dst_ip="217.55.242.173" src_ip="216.122.28.76" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
1130[label="199.144.202.92;10pkt 10fpkt", shape=pentagon, color=darkviolet];
1603[label="199.144.202.92;10pkt 10fpkt", shape=invtriangle, color=brown];
1851[label="199.144.202.92;9pkt 9fpkt", shape=invhouse, color=bisque];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.144.202.92:80, 130.202.212.95:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29072: (5.17241%)&lt;BR/&gt; 29071: (5.17241%)&lt;BR/&gt; 29070: (5.17241%)&lt;BR/&gt; 29069: (5.17241%)&gt;];
}
1130--1603[label="1;10pkt 10fpkt"];
1130--1851[label="1;9pkt 9fpkt"];
1603--1851[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.212.95" src_ip="199.144.202.92" src_port="80"/>
    </slice>
    <from sec="989039491" usec="0"/>
    <to sec="989039541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6371,1.82693,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.162.194.105"/>
    </slice>
    <from sec="989038803" usec="0"/>
    <to sec="989039682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
1161[label="153.59.135.109;31pkt 31fpkt", shape=pentagon, color=darkviolet];
1613[label="153.59.135.109;31pkt 31fpkt", shape=invtriangle, color=brown];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.59.135.109:80, 160.90.190.29:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1885: (1.6129%)&lt;BR/&gt; 1883: (1.6129%)&lt;BR/&gt; 1879: (1.6129%)&lt;BR/&gt; 1877: (1.6129%)&gt;];
}
1161--1613[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="160.90.190.29" src_ip="153.59.135.109" src_port="80"/>
    </slice>
    <from sec="989039376" usec="0"/>
    <to sec="989039651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576123,1.72015,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
92[label="212.55.11.112;s;228pkt 228fpkt", shape=diamond, color=yellow];
280[label="130.202.96.225;d;18pkt 18fpkt", shape=diamond, color=yellow];
1167[label="212.55.11.112;227pkt 227fpkt", shape=pentagon, color=darkviolet];
1615[label="212.55.11.112;227pkt 227fpkt", shape=invtriangle, color=brown];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.55.11.112:80, 216.168.123.78:*}[46.0526%]&lt;BR/&gt;{212.55.11.112:80, 130.202.89.203:*}[39.0351%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1259: (0.285714%)&lt;BR/&gt; 1258: (0.285714%)&lt;BR/&gt; 1257: (0.285714%)&lt;BR/&gt; 1256: (0.285714%)&gt;];
}
92--100[label="0.00877193;2pkt 2fpkt"];
92--155[label="0.460526;105pkt 105fpkt"];
92--280[label="1;18pkt 18fpkt"];
92--864[label="0.00438596;1pkt 1fpkt"];
92--882[label="0.00438596;1pkt 1fpkt"];
92--899[label="0.00438596;1pkt 1fpkt"];
92--1167[label="1;227pkt 227fpkt"];
92--1615[label="1;227pkt 227fpkt"];
280--1167[label="1;18pkt 18fpkt"];
280--1615[label="1;18pkt 18fpkt"];
1167--1615[label="1;227pkt 227fpkt"];
</description>
    <slice>
      <filter dst_ip="216.168.123.78" src_ip="212.55.11.112" src_port="80"/>
      <filter dst_ip="130.202.89.203" src_ip="212.55.11.112" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6371,1.82693,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.205.19.112"/>
    </slice>
    <from sec="989038822" usec="0"/>
    <to sec="989039680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
1179[label="102.150.72.120;109pkt 109fpkt", shape=pentagon, color=darkviolet];
1623[label="102.150.72.120;110pkt 110fpkt", shape=invtriangle, color=brown];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{102.150.72.120:*, 167.223.7.216:*}[50.9091%]&lt;BR/&gt;{102.150.72.120:*, 167.223.7.35:*}[49.0909%]&lt;BR/&gt;{102.150.72.120:3002, *:*}[26.3636%]&lt;BR/&gt;{102.150.72.120:3000, *:*}[24.5455%]&lt;BR/&gt;{102.150.72.120:3001, *:*}[24.5455%]&lt;BR/&gt;{102.150.72.120:3003, *:*}[24.5455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3002: (13.242%)&lt;BR/&gt; 3003: (12.3288%)&lt;BR/&gt; 3001: (12.3288%)&lt;BR/&gt; 3000: (12.1005%)&lt;BR/&gt; 3613: (0.456621%)&gt;];
}
1179--1623[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.7.216" src_ip="102.150.72.120"/>
      <filter dst_ip="167.223.7.35" src_ip="102.150.72.120"/>
      <filter src_ip="102.150.72.120" src_port="3002"/>
      <filter src_ip="102.150.72.120" src_port="3003"/>
      <filter src_ip="102.150.72.120" src_port="3001"/>
      <filter src_ip="102.150.72.120" src_port="3000"/>
    </slice>
    <from sec="989038822" usec="0"/>
    <to sec="989039677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
682[label="102.194.9.207;d;95pkt 95fpkt", shape=diamond, color=yellow];
1183[label="160.90.136.122;44pkt 44fpkt", shape=pentagon, color=darkviolet];
1625[label="160.90.136.122;43pkt 43fpkt", shape=invtriangle, color=brown];
1862[label="160.90.136.122;44pkt 44fpkt", shape=invhouse, color=bisque];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.90.176.252:*, 102.194.9.207:8200}[55.102%]&lt;BR/&gt;{160.90.136.122:*, 102.194.9.207:8200}[44.898%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8200: (50%)&lt;BR/&gt; 2088: (0.884956%)&lt;BR/&gt; 2087: (0.884956%)&lt;BR/&gt; 2086: (0.884956%)&lt;BR/&gt; 2085: (0.884956%)&gt;];
}
682--1183[label="0.931818;41pkt 41fpkt"];
682--1625[label="0.930233;40pkt 40fpkt"];
682--1862[label="0.931818;41pkt 41fpkt"];
1183--1625[label="1;43pkt 43fpkt"];
1183--1862[label="1;44pkt 44fpkt"];
1625--1862[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="102.194.9.207" dst_port="8200" src_ip="160.90.176.252"/>
      <filter dst_ip="102.194.9.207" dst_port="8200" src_ip="160.90.136.122"/>
    </slice>
    <from sec="989038808" usec="0"/>
    <to sec="989039677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00365,1.69547,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
141[label="220.48.15.126;s;685pkt 685fpkt", shape=diamond, color=yellow];
248[label="155.59.80.30;d;1737pkt 1737fpkt", shape=diamond, color=yellow];
815[label="220.48.15.126;s;545pkt 545fpkt", shape=hexagon, color=black];
1194[label="220.48.15.126;707pkt 707fpkt", shape=pentagon, color=darkviolet];
1301[label="220.48.9.178;63pkt 63fpkt", shape=pentagon, color=darkviolet];
1629[label="220.48.15.126;700pkt 700fpkt", shape=invtriangle, color=brown];
1864[label="220.48.15.126;700pkt 700fpkt", shape=invhouse, color=bisque];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.48.15.127:80, 155.59.80.30:*}[42.6776%]&lt;BR/&gt;{220.48.15.126:80, 155.59.80.30:*}[38.6885%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 7804: (0.0583998%)&lt;BR/&gt; 7796: (0.0583998%)&lt;BR/&gt; 7795: (0.0583998%)&lt;BR/&gt; 7792: (0.0583998%)&gt;];
}
141--248[label="0.908029;622pkt 622fpkt"];
141--815[label="1;545pkt 545fpkt"];
141--864[label="0.0321168;22pkt 22fpkt"];
141--882[label="0.0321168;22pkt 22fpkt"];
141--899[label="0.0321168;22pkt 22fpkt"];
141--1194[label="0.99854;684pkt 684fpkt"];
141--1629[label="0.988321;677pkt 677fpkt"];
141--1864[label="0.988321;677pkt 677fpkt"];
248--333[label="1;781pkt 781fpkt"];
248--493[label="0.897436;105pkt 105fpkt"];
248--815[label="1;545pkt 545fpkt"];
248--825[label="0.967391;89pkt 89fpkt"];
248--864[label="0.0632054;84pkt 84fpkt"];
248--882[label="0.0632054;84pkt 84fpkt"];
248--899[label="0.0632054;84pkt 84fpkt"];
248--1194[label="0.878359;621pkt 621fpkt"];
248--1301[label="0.888889;56pkt 56fpkt"];
248--1629[label="0.877143;614pkt 614fpkt"];
248--1757[label="0.657143;23pkt 23fpkt"];
248--1864[label="0.877143;614pkt 614fpkt"];
815--864[label="0.040367;22pkt 22fpkt"];
815--882[label="0.040367;22pkt 22fpkt"];
815--899[label="0.040367;22pkt 22fpkt"];
815--1194[label="0.998165;544pkt 544fpkt"];
815--1629[label="0.985321;537pkt 537fpkt"];
815--1864[label="0.985321;537pkt 537fpkt"];
1194--1629[label="1;700pkt 700fpkt"];
1194--1864[label="1;700pkt 700fpkt"];
1629--1864[label="1;700pkt 700fpkt"];
</description>
    <slice>
      <filter dst_ip="155.59.80.30" src_ip="220.48.15.127" src_port="80"/>
      <filter dst_ip="155.59.80.30" src_ip="220.48.15.126" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6371,1.82693,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.18.61.126"/>
    </slice>
    <from sec="989038812" usec="0"/>
    <to sec="989039373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6371,1.82693,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.161.215.126"/>
    </slice>
    <from sec="989039309" usec="0"/>
    <to sec="989039581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_294{
style=filled;
color=gray75;
1198[label="160.90.171.128;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1632[label="160.90.171.128;5pkt 5fpkt", shape=invtriangle, color=brown];
stat294[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.90.171.128:80, 151.100.153.132:1185}[20%]&lt;BR/&gt;{160.90.171.128:80, 151.100.153.132:1187}[20%]&lt;BR/&gt;{160.90.171.128:80, 151.100.153.132:1188}[20%]&lt;BR/&gt;{160.90.171.128:80, 151.100.153.132:3165}[20%]&lt;BR/&gt;{160.90.171.128:80, 151.100.153.132:3387}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3387: (10%)&lt;BR/&gt; 3165: (10%)&lt;BR/&gt; 1188: (10%)&lt;BR/&gt; 1187: (10%)&gt;];
}
1198--1632[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="151.100.153.132" dst_port="3387" src_ip="160.90.171.128" src_port="80"/>
      <filter dst_ip="151.100.153.132" dst_port="3165" src_ip="160.90.171.128" src_port="80"/>
      <filter dst_ip="151.100.153.132" dst_port="1188" src_ip="160.90.171.128" src_port="80"/>
      <filter dst_ip="151.100.153.132" dst_port="1187" src_ip="160.90.171.128" src_port="80"/>
      <filter dst_ip="151.100.153.132" dst_port="1185" src_ip="160.90.171.128" src_port="80"/>
    </slice>
    <from sec="989039469" usec="0"/>
    <to sec="989039552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6371,1.82693,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.103.13.132"/>
    </slice>
    <from sec="989039121" usec="0"/>
    <to sec="989039217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_296{
style=filled;
color=gray75;
1207[label="220.134.107.134;12pkt 12fpkt", shape=pentagon, color=darkviolet];
1640[label="220.134.107.134;13pkt 13fpkt", shape=invtriangle, color=brown];
stat296[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.134.107.134:80, 130.202.162.204:*}[46.1538%]&lt;BR/&gt;{220.134.107.134:80, 216.162.204.85:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2208: (4%)&lt;BR/&gt; 2200: (4%)&lt;BR/&gt; 2199: (4%)&lt;BR/&gt; 2198: (4%)&gt;];
}
1207--1640[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.162.204" src_ip="220.134.107.134" src_port="80"/>
      <filter dst_ip="216.162.204.85" src_ip="220.134.107.134" src_port="80"/>
    </slice>
    <from sec="989039170" usec="0"/>
    <to sec="989039667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
1216[label="155.59.73.137;18pkt 18fpkt", shape=pentagon, color=darkviolet];
1643[label="155.59.73.137;19pkt 19fpkt", shape=invtriangle, color=brown];
1871[label="155.59.73.137;18pkt 18fpkt", shape=invhouse, color=bisque];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.59.73.137:*, 213.224.128.40:80}[94.7368%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49183: (2.72727%)&lt;BR/&gt; 49182: (2.72727%)&lt;BR/&gt; 49181: (2.72727%)&lt;BR/&gt; 49180: (2.72727%)&gt;];
}
1216--1643[label="1;18pkt 18fpkt"];
1216--1871[label="1;18pkt 18fpkt"];
1643--1871[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="213.224.128.40" dst_port="80" src_ip="155.59.73.137"/>
    </slice>
    <from sec="989039218" usec="0"/>
    <to sec="989039599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
1220[label="25.220.134.138;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1646[label="25.220.134.138;3pkt 3fpkt", shape=invtriangle, color=brown];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.220.134.138:63988, 167.223.8.101:23}[33.3333%]&lt;BR/&gt;{25.220.134.138:113, 167.223.8.101:1249}[33.3333%]&lt;BR/&gt;{25.220.134.138:113, 167.223.8.101:1250}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (33.3333%)&lt;BR/&gt; 63988: (16.6667%)&lt;BR/&gt; 1250: (16.6667%)&lt;BR/&gt; 1249: (16.6667%)&lt;BR/&gt; 23: (16.6667%)&gt;];
}
1220--1646[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.8.101" dst_port="1250" src_ip="25.220.134.138" src_port="113"/>
      <filter dst_ip="167.223.8.101" dst_port="1249" src_ip="25.220.134.138" src_port="113"/>
      <filter dst_ip="167.223.8.101" dst_port="23" src_ip="25.220.134.138" src_port="63988"/>
    </slice>
    <from sec="989038895" usec="0"/>
    <to sec="989039664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6371,1.82693,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.54.22.140"/>
    </slice>
    <from sec="989039290" usec="0"/>
    <to sec="989039641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
1227[label="223.74.104.143;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1652[label="223.74.104.143;1pkt 1fpkt", shape=invtriangle, color=brown];
1876[label="223.74.104.143;2pkt 2fpkt", shape=invhouse, color=bisque];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.74.104.143:80, 157.96.201.16:1033}[50%]&lt;BR/&gt;{223.74.104.143:80, 216.162.194.33:1041}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1041: (37.5%)&lt;BR/&gt; 1033: (12.5%)&gt;];
}
1227--1652[label="1;1pkt 1fpkt"];
1227--1876[label="1;1pkt 1fpkt"];
1652--1876[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.162.194.33" dst_port="1041" src_ip="223.74.104.143" src_port="80"/>
      <filter dst_ip="157.96.201.16" dst_port="1033" src_ip="223.74.104.143" src_port="80"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576123,1.72015,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
578[label="25.239.172.143;s;28pkt 28fpkt", shape=diamond, color=yellow];
650[label="160.90.189.146;d;25pkt 25fpkt", shape=diamond, color=yellow];
1228[label="25.239.172.143;27pkt 27fpkt", shape=pentagon, color=darkviolet];
1653[label="25.239.172.143;28pkt 28fpkt", shape=invtriangle, color=brown];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.239.172.143:80, 160.90.189.146:*}[53.6585%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4684: (1.85185%)&lt;BR/&gt; 4683: (1.85185%)&lt;BR/&gt; 4680: (1.85185%)&lt;BR/&gt; 4679: (1.85185%)&gt;];
}
578--650[label="0.48;12pkt 12fpkt"];
578--864[label="0.0357143;1pkt 1fpkt"];
578--882[label="0.0357143;1pkt 1fpkt"];
578--899[label="0.0357143;1pkt 1fpkt"];
578--1228[label="1;27pkt 27fpkt"];
578--1653[label="1;28pkt 28fpkt"];
650--1228[label="0.48;12pkt 12fpkt"];
650--1653[label="0.48;12pkt 12fpkt"];
1228--1653[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="160.90.189.146" src_ip="25.239.172.143" src_port="80"/>
    </slice>
    <from sec="989038883" usec="0"/>
    <to sec="989039550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_303{
style=filled;
color=gray75;
162[label="25.9.11.144;s;49pkt 49fpkt", shape=diamond, color=yellow];
361[label="155.59.64.198;d;32pkt 32fpkt", shape=diamond, color=yellow];
393[label="155.59.170.83;d;1223pkt 1223fpkt", shape=diamond, color=yellow];
443[label="25.13.117.26;s;79pkt 79fpkt", shape=diamond, color=yellow];
515[label="25.13.97.102;s;43pkt 43fpkt", shape=diamond, color=yellow];
926[label="198.232.152.3;9pkt 9fpkt", shape=pentagon, color=darkviolet];
978[label="153.218.159.25;30pkt 30fpkt", shape=pentagon, color=darkviolet];
1128[label="198.201.59.92;28pkt 28fpkt", shape=pentagon, color=darkviolet];
1147[label="25.13.97.102;43pkt 43fpkt", shape=pentagon, color=darkviolet];
1229[label="25.9.11.144;82pkt 82fpkt", shape=pentagon, color=darkviolet];
1237[label="25.9.11.147;25pkt 25fpkt", shape=pentagon, color=darkviolet];
1239[label="220.177.59.148;21pkt 21fpkt", shape=pentagon, color=darkviolet];
1438[label="25.9.111.230;19pkt 19fpkt", shape=pentagon, color=darkviolet];
1488[label="198.232.152.3;9pkt 9fpkt", shape=invtriangle, color=brown];
1602[label="198.201.59.92;27pkt 27fpkt", shape=invtriangle, color=brown];
1608[label="25.13.97.102;44pkt 44fpkt", shape=invtriangle, color=brown];
1654[label="25.9.11.144;82pkt 82fpkt", shape=invtriangle, color=brown];
1660[label="220.177.59.148;21pkt 21fpkt", shape=invtriangle, color=brown];
1790[label="198.232.152.3;8pkt 8fpkt", shape=invhouse, color=bisque];
1849[label="198.201.59.92;27pkt 27fpkt", shape=invhouse, color=bisque];
1854[label="25.13.97.102;44pkt 44fpkt", shape=invhouse, color=bisque];
1877[label="25.9.11.144;83pkt 83fpkt", shape=invhouse, color=bisque];
stat303[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.13.97.116:80, 155.59.170.83:*}[41.7994%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3836%)&lt;BR/&gt; 81: (0.567061%)&lt;BR/&gt; 34131: (0.123274%)&lt;BR/&gt; 34111: (0.123274%)&lt;BR/&gt; 34102: (0.123274%)&gt;];
}
162--361[label="0.09375;3pkt 3fpkt"];
162--393[label="0.938776;46pkt 46fpkt"];
162--1229[label="0.979592;48pkt 48fpkt"];
162--1654[label="0.979592;48pkt 48fpkt"];
162--1877[label="1;49pkt 49fpkt"];
361--561[label="0.0625;2pkt 2fpkt"];
361--864[label="0.09375;3pkt 3fpkt"];
361--882[label="0.09375;3pkt 3fpkt"];
361--899[label="0.09375;3pkt 3fpkt"];
361--1001[label="0.037037;1pkt 1fpkt"];
361--1017[label="0.25;1pkt 1fpkt"];
361--1229[label="0.09375;3pkt 3fpkt"];
361--1237[label="0.12;3pkt 3fpkt"];
361--1527[label="0.0357143;1pkt 1fpkt"];
361--1538[label="0.25;1pkt 1fpkt"];
361--1654[label="0.09375;3pkt 3fpkt"];
361--1877[label="0.125;4pkt 4fpkt"];
393--443[label="1;79pkt 79fpkt"];
393--496[label="0.933333;28pkt 28fpkt"];
393--515[label="1;43pkt 43fpkt"];
393--659[label="1;22pkt 22fpkt"];
393--826[label="0.931034;27pkt 27fpkt"];
393--864[label="0.0752249;92pkt 92fpkt"];
393--882[label="0.0752249;92pkt 92fpkt"];
393--899[label="0.0752249;92pkt 92fpkt"];
393--926[label="1;9pkt 9fpkt"];
393--978[label="1;30pkt 30fpkt"];
393--1128[label="1;28pkt 28fpkt"];
393--1147[label="0.976744;42pkt 42fpkt"];
393--1229[label="0.963415;79pkt 79fpkt"];
393--1237[label="0.88;22pkt 22fpkt"];
393--1239[label="1;21pkt 21fpkt"];
393--1243[label="1;22pkt 22fpkt"];
393--1432[label="0.357143;5pkt 5fpkt"];
393--1438[label="1;19pkt 19fpkt"];
393--1488[label="1;9pkt 9fpkt"];
393--1602[label="1;27pkt 27fpkt"];
393--1608[label="0.977273;43pkt 43fpkt"];
393--1654[label="0.963415;79pkt 79fpkt"];
393--1660[label="1;21pkt 21fpkt"];
393--1790[label="1;8pkt 8fpkt"];
393--1849[label="1;27pkt 27fpkt"];
393--1854[label="0.977273;43pkt 43fpkt"];
393--1877[label="0.951807;79pkt 79fpkt"];
393--1880[label="0.954545;21pkt 21fpkt"];
515--864[label="0.0232558;1pkt 1fpkt"];
515--882[label="0.0232558;1pkt 1fpkt"];
515--899[label="0.0232558;1pkt 1fpkt"];
515--1147[label="0.976744;42pkt 42fpkt"];
515--1608[label="1;43pkt 43fpkt"];
515--1854[label="1;43pkt 43fpkt"];
926--1488[label="1;9pkt 9fpkt"];
926--1790[label="1;8pkt 8fpkt"];
1128--1602[label="1;27pkt 27fpkt"];
1128--1849[label="1;27pkt 27fpkt"];
1147--1608[label="1;43pkt 43fpkt"];
1147--1854[label="1;43pkt 43fpkt"];
1229--1654[label="1;82pkt 82fpkt"];
1229--1877[label="1;82pkt 82fpkt"];
1239--1660[label="1;21pkt 21fpkt"];
1239--1880[label="1;21pkt 21fpkt"];
1488--1790[label="1;8pkt 8fpkt"];
1602--1849[label="1;27pkt 27fpkt"];
1608--1854[label="1;44pkt 44fpkt"];
1654--1877[label="1;82pkt 82fpkt"];
1660--1880[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="155.59.170.83" src_ip="25.13.97.116" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
1230[label="25.175.69.144;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1655[label="25.175.69.144;14pkt 14fpkt", shape=invtriangle, color=brown];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.175.69.144:443, 167.223.0.80:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3102: (3.7037%)&lt;BR/&gt; 3088: (3.7037%)&lt;BR/&gt; 3085: (3.7037%)&lt;BR/&gt; 3084: (3.7037%)&gt;];
}
1230--1655[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.0.80" src_ip="25.175.69.144" src_port="443"/>
    </slice>
    <from sec="989038831" usec="0"/>
    <to sec="989039643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
1241[label="216.168.103.148;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1661[label="216.168.103.148;2pkt 2fpkt", shape=invtriangle, color=brown];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.168.103.148:53, 216.194.38.153:2565}[50%]&lt;BR/&gt;{216.168.103.148:53, 220.10.40.224:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (75%)&lt;BR/&gt; 2565: (25%)&gt;];
}
1241--1661[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="220.10.40.224" dst_port="53" src_ip="216.168.103.148" src_port="53"/>
      <filter dst_ip="216.194.38.153" dst_port="2565" src_ip="216.168.103.148" src_port="53"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6371,1.82693,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.208.141.149"/>
    </slice>
    <from sec="989038803" usec="0"/>
    <to sec="989038987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_307{
style=filled;
color=gray75;
375[label="213.163.37.166;d;6pkt 6fpkt", shape=diamond, color=yellow];
1244[label="157.96.200.152;26pkt 26fpkt", shape=pentagon, color=darkviolet];
1664[label="157.96.200.152;27pkt 27fpkt", shape=invtriangle, color=brown];
1882[label="157.96.200.152;27pkt 27fpkt", shape=invhouse, color=bisque];
stat307[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.96.200.152:*, 223.102.202.46:80}[55.5556%]&lt;BR/&gt;{157.96.200.152:*, 213.163.37.166:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1157: (2.32558%)&lt;BR/&gt; 1154: (2.32558%)&lt;BR/&gt; 1150: (2.32558%)&lt;BR/&gt; 1149: (2.32558%)&gt;];
}
375--1244[label="1;6pkt 6fpkt"];
375--1664[label="1;6pkt 6fpkt"];
375--1882[label="1;6pkt 6fpkt"];
1244--1664[label="1;26pkt 26fpkt"];
1244--1882[label="1;26pkt 26fpkt"];
1664--1882[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="223.102.202.46" dst_port="80" src_ip="157.96.200.152"/>
      <filter dst_ip="213.163.37.166" dst_port="80" src_ip="157.96.200.152"/>
    </slice>
    <from sec="989038919" usec="0"/>
    <to sec="989039075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_308{
style=filled;
color=gray75;
1248[label="200.67.16.156;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1665[label="200.67.16.156;1pkt 1fpkt", shape=invtriangle, color=brown];
stat308[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.67.16.156:80, 216.115.217.19:45038}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45038: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1248--1665[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.115.217.19" dst_port="45038" src_ip="200.67.16.156" src_port="80"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
1250[label="197.145.179.156;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1667[label="197.145.179.156;2pkt 2fpkt", shape=invtriangle, color=brown];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.145.179.156:80, 157.96.216.1:42299}[50%]&lt;BR/&gt;{197.145.179.156:80, 157.96.216.1:42316}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42316: (25%)&lt;BR/&gt; 42299: (25%)&gt;];
}
1250--1667[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="157.96.216.1" dst_port="42316" src_ip="197.145.179.156" src_port="80"/>
      <filter dst_ip="157.96.216.1" dst_port="42299" src_ip="197.145.179.156" src_port="80"/>
    </slice>
    <from sec="989038900" usec="0"/>
    <to sec="989039058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
1252[label="198.53.37.159;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1669[label="198.53.37.159;3pkt 3fpkt", shape=invtriangle, color=brown];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.53.37.159:80, 167.223.0.80:3010}[33.3333%]&lt;BR/&gt;{198.53.37.159:80, 167.223.0.80:3047}[33.3333%]&lt;BR/&gt;{198.53.37.159:80, 167.223.0.80:3242}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3242: (16.6667%)&lt;BR/&gt; 3047: (16.6667%)&lt;BR/&gt; 3010: (16.6667%)&gt;];
}
1252--1669[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.0.80" dst_port="3242" src_ip="198.53.37.159" src_port="80"/>
      <filter dst_ip="167.223.0.80" dst_port="3047" src_ip="198.53.37.159" src_port="80"/>
      <filter dst_ip="167.223.0.80" dst_port="3010" src_ip="198.53.37.159" src_port="80"/>
    </slice>
    <from sec="989038806" usec="0"/>
    <to sec="989039270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
1254[label="221.240.1.160;15pkt 15fpkt", shape=pentagon, color=darkviolet];
1671[label="221.240.1.160;15pkt 15fpkt", shape=invtriangle, color=brown];
1886[label="221.240.1.160;16pkt 16fpkt", shape=invhouse, color=bisque];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.240.1.160:80, 160.90.190.29:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1884: (3.26087%)&lt;BR/&gt; 1878: (3.26087%)&lt;BR/&gt; 1871: (3.26087%)&lt;BR/&gt; 1858: (3.26087%)&gt;];
}
1254--1671[label="1;15pkt 15fpkt"];
1254--1886[label="1;15pkt 15fpkt"];
1671--1886[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="160.90.190.29" src_ip="221.240.1.160" src_port="80"/>
    </slice>
    <from sec="989039376" usec="0"/>
    <to sec="989039651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
1257[label="167.223.53.160;57pkt 57fpkt", shape=pentagon, color=darkviolet];
1674[label="167.223.53.160;57pkt 57fpkt", shape=invtriangle, color=brown];
1888[label="167.223.53.160;58pkt 58fpkt", shape=invhouse, color=bisque];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.223.53.160:*, 209.41.103.146:41591}[25.8621%]&lt;BR/&gt;{167.223.53.160:*, 209.41.103.146:41588}[24.1379%]&lt;BR/&gt;{167.223.53.160:*, 209.41.103.146:41589}[24.1379%]&lt;BR/&gt;{167.223.53.160:*, 209.41.103.146:41590}[20.6897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41591: (13.0814%)&lt;BR/&gt; 41589: (12.2093%)&lt;BR/&gt; 41588: (12.2093%)&lt;BR/&gt; 41590: (10.4651%)&lt;BR/&gt; 43336: (0.872093%)&gt;];
}
1257--1674[label="1;57pkt 57fpkt"];
1257--1888[label="1;57pkt 57fpkt"];
1674--1888[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="209.41.103.146" dst_port="41591" src_ip="167.223.53.160"/>
      <filter dst_ip="209.41.103.146" dst_port="41589" src_ip="167.223.53.160"/>
      <filter dst_ip="209.41.103.146" dst_port="41588" src_ip="167.223.53.160"/>
      <filter dst_ip="209.41.103.146" dst_port="41590" src_ip="167.223.53.160"/>
    </slice>
    <from sec="989038809" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
1258[label="213.64.222.160;10pkt 10fpkt", shape=pentagon, color=darkviolet];
1675[label="213.64.222.160;10pkt 10fpkt", shape=invtriangle, color=brown];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.64.222.160:*, 157.96.208.46:25}[30%]&lt;BR/&gt;{213.64.222.160:0, *:0}[20%]&lt;BR/&gt;{213.64.222.160:*, 157.96.208.46:113}[20%]&lt;BR/&gt;{213.64.222.160:25, 157.96.208.46:*}[20%]&lt;BR/&gt;{213.64.222.160:*, 160.90.73.79:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (30%)&lt;BR/&gt; 0: (20%)&lt;BR/&gt; 113: (10%)&lt;BR/&gt; 38172: (5%)&lt;BR/&gt; 37484: (5%)&gt;];
}
1258--1675[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="160.90.73.79" src_ip="213.64.222.160"/>
      <filter dst_ip="157.96.208.46" src_ip="213.64.222.160" src_port="25"/>
      <filter dst_ip="157.96.208.46" dst_port="25" src_ip="213.64.222.160"/>
      <filter dst_ip="157.96.208.46" dst_port="113" src_ip="213.64.222.160"/>
      <filter src_ip="213.64.222.160"/>
    </slice>
    <from sec="989038806" usec="0"/>
    <to sec="989039362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
1270[label="167.223.54.164;83pkt 83fpkt", shape=pentagon, color=darkviolet];
1680[label="167.223.54.164;84pkt 84fpkt", shape=invtriangle, color=brown];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.223.54.164:113, *:*}[44.0476%]&lt;BR/&gt;{167.223.54.164:*, 213.18.41.59:*}[32.1429%]&lt;BR/&gt;{167.223.54.164:*, 131.89.68.241:*}[27.381%]&lt;BR/&gt;{167.223.54.164:*, 213.18.41.55:6667}[20.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (25.7485%)&lt;BR/&gt; 113: (23.3533%)&lt;BR/&gt; 25: (0.898204%)&lt;BR/&gt; 59671: (0.598802%)&lt;BR/&gt; 59373: (0.598802%)&gt;];
}
1270--1680[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter dst_ip="213.18.41.59" src_ip="167.223.54.164"/>
      <filter dst_ip="131.89.68.241" src_ip="167.223.54.164"/>
      <filter src_ip="167.223.54.164" src_port="113"/>
      <filter dst_ip="213.18.41.55" dst_port="6667" src_ip="167.223.54.164"/>
    </slice>
    <from sec="989038807" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
1271[label="199.97.94.164;6pkt 6fpkt", shape=pentagon, color=darkviolet];
1681[label="199.97.94.164;7pkt 7fpkt", shape=invtriangle, color=brown];
1892[label="199.97.94.164;6pkt 6fpkt", shape=invhouse, color=bisque];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.97.94.164:80, 157.96.200.128:*}[71.4286%]&lt;BR/&gt;{199.97.94.164:80, 157.96.193.172:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32879: (7.89474%)&lt;BR/&gt; 32876: (7.89474%)&lt;BR/&gt; 1631: (7.89474%)&lt;BR/&gt; 1629: (7.89474%)&gt;];
}
1271--1681[label="1;6pkt 6fpkt"];
1271--1892[label="1;6pkt 6fpkt"];
1681--1892[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="157.96.200.128" src_ip="199.97.94.164" src_port="80"/>
      <filter dst_ip="157.96.193.172" src_ip="199.97.94.164" src_port="80"/>
    </slice>
    <from sec="989039336" usec="0"/>
    <to sec="989039580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
1282[label="200.96.121.168;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1688[label="200.96.121.168;3pkt 3fpkt", shape=invtriangle, color=brown];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.96.121.168:80, 130.202.211.1:1463}[33.3333%]&lt;BR/&gt;{200.96.121.168:80, 130.202.211.1:1464}[33.3333%]&lt;BR/&gt;{200.96.121.168:80, 130.202.211.1:1471}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1471: (16.6667%)&lt;BR/&gt; 1464: (16.6667%)&lt;BR/&gt; 1463: (16.6667%)&gt;];
}
1282--1688[label="1;3pkt 3fpkt"];
1282--1897[label="1;3pkt 3fpkt"];
1688--1897[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.211.1" dst_port="1471" src_ip="200.96.121.168" src_port="80"/>
      <filter dst_ip="130.202.211.1" dst_port="1464" src_ip="200.96.121.168" src_port="80"/>
      <filter dst_ip="130.202.211.1" dst_port="1463" src_ip="200.96.121.168" src_port="80"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
732[label="216.168.103.179;s;9pkt 9fpkt", shape=diamond, color=yellow];
1306[label="216.168.103.179;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1698[label="216.168.103.179;11pkt 11fpkt", shape=invtriangle, color=brown];
1903[label="216.168.103.179;11pkt 11fpkt", shape=invhouse, color=bisque];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.168.103.179:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
732--1306[label="1;9pkt 9fpkt"];
732--1698[label="1;9pkt 9fpkt"];
732--1903[label="1;9pkt 9fpkt"];
1306--1698[label="1;11pkt 11fpkt"];
1306--1903[label="1;11pkt 11fpkt"];
1698--1903[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="216.168.103.179"/>
    </slice>
    <from sec="989038825" usec="0"/>
    <to sec="989039682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
1319[label="130.202.192.184;26pkt 26fpkt", shape=pentagon, color=darkviolet];
1704[label="130.202.192.184;26pkt 26fpkt", shape=invtriangle, color=brown];
1907[label="130.202.192.184;25pkt 25fpkt", shape=invhouse, color=bisque];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.202.192.184:*, 220.115.39.166:80}[69.2308%]&lt;BR/&gt;{130.202.192.184:*, 220.115.39.30:80}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1370: (1.94805%)&lt;BR/&gt; 1362: (1.94805%)&lt;BR/&gt; 1358: (1.94805%)&lt;BR/&gt; 1356: (1.94805%)&gt;];
}
1319--1704[label="1;26pkt 26fpkt"];
1319--1907[label="1;25pkt 25fpkt"];
1704--1907[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="220.115.39.166" dst_port="80" src_ip="130.202.192.184"/>
      <filter dst_ip="220.115.39.30" dst_port="80" src_ip="130.202.192.184"/>
    </slice>
    <from sec="989039209" usec="0"/>
    <to sec="989039273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_319{
style=filled;
color=gray75;
1321[label="221.145.233.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1705[label="221.145.233.184;1pkt 1fpkt", shape=invtriangle, color=brown];
stat319[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.145.233.184:5555, 167.223.33.160:4484}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5555: (50%)&lt;BR/&gt; 4484: (50%)&gt;];
}
1321--1705[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.33.160" dst_port="4484" src_ip="221.145.233.184" src_port="5555"/>
    </slice>
    <from sec="989038815" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.859655,1.69398,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_320{
style=filled;
color=gray75;
426[label="196.92.81.190;s;31pkt 31fpkt", shape=diamond, color=yellow];
638[label="217.22.114.73;d;67pkt 67fpkt", shape=diamond, color=yellow];
783[label="196.92.81.190;s;31pkt 31fpkt", shape=hexagon, color=black];
1330[label="196.92.81.190;51pkt 51fpkt", shape=pentagon, color=darkviolet];
1358[label="200.179.68.201;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1460[label="197.0.196.238;31pkt 31fpkt", shape=pentagon, color=darkviolet];
1709[label="196.92.81.190;51pkt 51fpkt", shape=invtriangle, color=brown];
1776[label="197.0.196.238;31pkt 31fpkt", shape=invtriangle, color=brown];
stat320[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.92.81.190:80, *:*}[43.5897%]&lt;BR/&gt;{197.0.196.238:80, 217.22.114.73:*}[26.4957%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37054: (0.822368%)&lt;BR/&gt; 37051: (0.822368%)&lt;BR/&gt; 37050: (0.822368%)&lt;BR/&gt; 37047: (0.822368%)&gt;];
}
426--638[label="0.290323;9pkt 9fpkt"];
426--783[label="1;31pkt 31fpkt"];
426--864[label="0.290323;9pkt 9fpkt"];
426--882[label="0.290323;9pkt 9fpkt"];
426--899[label="0.290323;9pkt 9fpkt"];
426--1330[label="1;31pkt 31fpkt"];
426--1709[label="1;31pkt 31fpkt"];
638--783[label="0.290323;9pkt 9fpkt"];
638--1330[label="0.215686;11pkt 11fpkt"];
638--1358[label="0.0909091;1pkt 1fpkt"];
638--1460[label="1;31pkt 31fpkt"];
638--1709[label="0.215686;11pkt 11fpkt"];
638--1776[label="1;31pkt 31fpkt"];
783--864[label="0.290323;9pkt 9fpkt"];
783--882[label="0.290323;9pkt 9fpkt"];
783--899[label="0.290323;9pkt 9fpkt"];
783--1330[label="1;31pkt 31fpkt"];
783--1709[label="1;31pkt 31fpkt"];
1330--1709[label="1;51pkt 51fpkt"];
1460--1776[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter src_ip="196.92.81.190" src_port="80"/>
      <filter dst_ip="217.22.114.73" src_ip="197.0.196.238" src_port="80"/>
    </slice>
    <from sec="989038809" usec="0"/>
    <to sec="989039681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
1351[label="199.9.37.200;20pkt 20fpkt", shape=pentagon, color=darkviolet];
1720[label="199.9.37.200;21pkt 21fpkt", shape=invtriangle, color=brown];
1916[label="199.9.37.200;20pkt 20fpkt", shape=invhouse, color=bisque];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.9.37.200:80, 130.202.211.0:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49246: (2.45902%)&lt;BR/&gt; 49245: (2.45902%)&lt;BR/&gt; 49244: (2.45902%)&lt;BR/&gt; 49243: (2.45902%)&gt;];
}
1351--1720[label="1;20pkt 20fpkt"];
1351--1916[label="1;20pkt 20fpkt"];
1720--1916[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.211.0" src_ip="199.9.37.200" src_port="80"/>
    </slice>
    <from sec="989038840" usec="0"/>
    <to sec="989038935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.774738,1.72161,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
701[label="130.202.89.203;s;89pkt 89fpkt", shape=diamond, color=yellow];
1365[label="130.202.89.203;88pkt 88fpkt", shape=pentagon, color=darkviolet];
1727[label="130.202.89.203;88pkt 88fpkt", shape=invtriangle, color=brown];
1922[label="130.202.89.203;89pkt 89fpkt", shape=invhouse, color=bisque];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.202.89.203:*, 212.55.11.112:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1364: (0.564972%)&lt;BR/&gt; 1363: (0.564972%)&lt;BR/&gt; 1362: (0.564972%)&lt;BR/&gt; 1361: (0.564972%)&gt;];
}
701--1365[label="1;88pkt 88fpkt"];
701--1727[label="1;88pkt 88fpkt"];
701--1922[label="1;89pkt 89fpkt"];
1365--1727[label="1;88pkt 88fpkt"];
1365--1922[label="1;88pkt 88fpkt"];
1727--1922[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_ip="212.55.11.112" dst_port="80" src_ip="130.202.89.203"/>
    </slice>
    <from sec="989039423" usec="0"/>
    <to sec="989039556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6371,1.82693,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.61.34.207"/>
    </slice>
    <from sec="989038803" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
1381[label="200.213.20.209;36pkt 36fpkt", shape=pentagon, color=darkviolet];
1735[label="200.213.20.209;36pkt 36fpkt", shape=invtriangle, color=brown];
1927[label="200.213.20.209;37pkt 37fpkt", shape=invhouse, color=bisque];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.213.20.209:*, 130.202.219.92:8000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (50%)&lt;BR/&gt; 4916: (1.37615%)&lt;BR/&gt; 4745: (1.37615%)&lt;BR/&gt; 4576: (1.37615%)&lt;BR/&gt; 4460: (1.37615%)&gt;];
}
1381--1735[label="1;36pkt 36fpkt"];
1381--1927[label="1;36pkt 36fpkt"];
1735--1927[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.219.92" dst_port="8000" src_ip="200.213.20.209"/>
    </slice>
    <from sec="989038811" usec="0"/>
    <to sec="989039655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_325{
style=filled;
color=gray75;
1382[label="157.96.95.209;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1736[label="157.96.95.209;2pkt 2fpkt", shape=invtriangle, color=brown];
stat325[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.96.95.209:1295, 220.83.173.102:80}[33.3333%]&lt;BR/&gt;{157.96.95.209:1291, 220.83.248.47:80}[33.3333%]&lt;BR/&gt;{157.96.95.209:1292, 220.83.248.47:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1292: (20%)&lt;BR/&gt; 1291: (20%)&lt;BR/&gt; 1295: (10%)&gt;];
}
1382--1736[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="220.83.248.47" dst_port="80" src_ip="157.96.95.209" src_port="1292"/>
      <filter dst_ip="220.83.248.47" dst_port="80" src_ip="157.96.95.209" src_port="1291"/>
      <filter dst_ip="220.83.173.102" dst_port="80" src_ip="157.96.95.209" src_port="1295"/>
    </slice>
    <from sec="989039643" usec="0"/>
    <to sec="989039672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,003,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
1401[label="157.130.250.214;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1744[label="157.130.250.214;1pkt 1fpkt", shape=invtriangle, color=brown];
1932[label="157.130.250.214;1pkt 1fpkt", shape=invhouse, color=bisque];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.130.250.214:1049, 157.130.250.5:135}[50%]&lt;BR/&gt;{157.130.250.214:1049, 157.130.246.43:135}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1049: (50%)&lt;BR/&gt; 135: (50%)&gt;];
}
1401--1744[label="1;1pkt 1fpkt"];
1401--1932[label="1;1pkt 1fpkt"];
1744--1932[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="157.130.246.43" dst_port="135" src_ip="157.130.250.214" src_port="1049"/>
      <filter dst_ip="157.130.250.5" dst_port="135" src_ip="157.130.250.214" src_port="1049"/>
    </slice>
    <from sec="989038803" usec="0"/>
    <to sec="989039675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_327{
style=filled;
color=gray75;
1414[label="209.154.80.221;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1752[label="209.154.80.221;11pkt 11fpkt", shape=invtriangle, color=brown];
1938[label="209.154.80.221;12pkt 12fpkt", shape=invhouse, color=bisque];
stat327[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.154.80.221:*, 216.122.28.78:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 7745: (4.41176%)&lt;BR/&gt; 7741: (4.41176%)&lt;BR/&gt; 7728: (4.41176%)&lt;BR/&gt; 7726: (4.41176%)&gt;];
}
1414--1752[label="1;11pkt 11fpkt"];
1414--1938[label="1;11pkt 11fpkt"];
1752--1938[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="216.122.28.78" dst_port="80" src_ip="209.154.80.221"/>
    </slice>
    <from sec="989039636" usec="0"/>
    <to sec="989039661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
1434[label="167.223.2.229;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1760[label="167.223.2.229;11pkt 11fpkt", shape=invtriangle, color=brown];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.223.2.229:27374, *:*}[63.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27374: (31.8182%)&lt;BR/&gt; 6667: (4.54545%)&lt;BR/&gt; 4761: (4.54545%)&lt;BR/&gt; 4736: (4.54545%)&lt;BR/&gt; 4237: (4.54545%)&gt;];
}
1434--1760[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="167.223.2.229" src_port="27374"/>
    </slice>
    <from sec="989038888" usec="0"/>
    <to sec="989039664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6371,1.82693,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.85.178.229"/>
    </slice>
    <from sec="989039006" usec="0"/>
    <to sec="989039606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.77559,1.79228,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_330{
style=filled;
color=gray75;
1441[label="221.161.133.230;19pkt 19fpkt", shape=pentagon, color=darkviolet];
1764[label="221.161.133.230;19pkt 19fpkt", shape=invtriangle, color=brown];
1945[label="221.161.133.230;19pkt 19fpkt", shape=invhouse, color=bisque];
stat330[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.161.133.230:80, 130.202.82.25:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60943: (2.63158%)&lt;BR/&gt; 60942: (2.63158%)&lt;BR/&gt; 60941: (2.63158%)&lt;BR/&gt; 60940: (2.63158%)&gt;];
}
1441--1764[label="1;19pkt 19fpkt"];
1441--1945[label="1;19pkt 19fpkt"];
1764--1945[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="130.202.82.25" src_ip="221.161.133.230" src_port="80"/>
    </slice>
    <from sec="989039247" usec="0"/>
    <to sec="989039405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
1456[label="160.90.241.235;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1773[label="160.90.241.235;1pkt 1fpkt", shape=invtriangle, color=brown];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.90.241.235:2678, 200.46.20.248:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2678: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1456--1773[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.46.20.248" dst_port="80" src_ip="160.90.241.235" src_port="2678"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577269,1.79088,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
1457[label="25.137.2.236;40pkt 40fpkt", shape=pentagon, color=darkviolet];
1774[label="25.137.2.236;40pkt 40fpkt", shape=invtriangle, color=brown];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.137.2.236:80, 160.90.140.211:*}[65%]&lt;BR/&gt;{25.137.2.236:80, 130.202.208.176:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2194: (1.25%)&lt;BR/&gt; 2193: (1.25%)&lt;BR/&gt; 2174: (1.25%)&lt;BR/&gt; 2173: (1.25%)&gt;];
}
1457--1774[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="160.90.140.211" src_ip="25.137.2.236" src_port="80"/>
      <filter dst_ip="130.202.208.176" src_ip="25.137.2.236" src_port="80"/>
    </slice>
    <from sec="989038980" usec="0"/>
    <to sec="989039651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6371,1.82693,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.100.24.238"/>
    </slice>
    <from sec="989038843" usec="0"/>
    <to sec="989038952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576123,1.72015,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_334{
style=filled;
color=gray75;
620[label="167.223.21.24;d;21pkt 21fpkt", shape=diamond, color=yellow];
1470[label="103.35.208.245;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1779[label="103.35.208.245;13pkt 13fpkt", shape=invtriangle, color=brown];
stat334[shape=component, label=&lt;Rules:&lt;BR/&gt;{103.35.208.245:20, 167.223.21.24:*}[42.8571%]&lt;BR/&gt;{200.134.11.96:20, 167.223.21.24:*}[28.5714%]&lt;BR/&gt;{*:21, 167.223.21.24:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (35.1064%)&lt;BR/&gt; 21: (14.8936%)&lt;BR/&gt; 2820: (3.19149%)&lt;BR/&gt; 2819: (3.19149%)&lt;BR/&gt; 2818: (3.19149%)&gt;];
}
620--1470[label="1;13pkt 13fpkt"];
620--1779[label="1;13pkt 13fpkt"];
1470--1779[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.21.24" src_port="21"/>
      <filter dst_ip="167.223.21.24" src_ip="103.35.208.245" src_port="20"/>
      <filter dst_ip="167.223.21.24" src_ip="200.134.11.96" src_port="20"/>
    </slice>
    <from sec="989038801" usec="0"/>
    <to sec="989039675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00365,1.69547,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
95[label="222.140.90.249;s;4pkt 4fpkt", shape=diamond, color=yellow];
166[label="200.46.20.248;s;342pkt 342fpkt", shape=diamond, color=yellow];
274[label="155.59.230.136;d;316pkt 316fpkt", shape=diamond, color=yellow];
391[label="155.59.133.56;d;209pkt 209fpkt", shape=diamond, color=yellow];
500[label="160.90.241.235;d;79pkt 79fpkt", shape=diamond, color=yellow];
517[label="200.46.69.137;s;66pkt 66fpkt", shape=diamond, color=yellow];
566[label="200.46.69.98;s;196pkt 196fpkt", shape=diamond, color=yellow];
697[label="155.59.177.28;d;91pkt 91fpkt", shape=diamond, color=yellow];
705[label="200.96.115.119;s;30pkt 30fpkt", shape=diamond, color=yellow];
828[label="200.46.20.248;s;268pkt 268fpkt", shape=hexagon, color=black];
1143[label="200.46.69.98;201pkt 201fpkt", shape=pentagon, color=darkviolet];
1162[label="198.182.2.111;6pkt 6fpkt", shape=pentagon, color=darkviolet];
1233[label="200.96.113.146;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1240[label="25.192.94.148;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1474[label="200.46.20.248;382pkt 382fpkt", shape=pentagon, color=darkviolet];
1657[label="200.96.113.146;13pkt 13fpkt", shape=invtriangle, color=brown];
1684[label="198.97.198.166;24pkt 24fpkt", shape=invtriangle, color=brown];
1781[label="200.46.20.248;382pkt 382fpkt", shape=invtriangle, color=brown];
1894[label="198.97.198.166;24pkt 24fpkt", shape=invhouse, color=bisque];
1897[label="200.96.121.168;13pkt 13fpkt", shape=invhouse, color=bisque];
1951[label="200.46.20.248;381pkt 381fpkt", shape=invhouse, color=bisque];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.46.20.248:80, *:*}[36.2085%]&lt;BR/&gt;{*:80, 155.59.230.136:*}[24.7393%]&lt;BR/&gt;{*:10000, *:*}[21.9905%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.2887%)&lt;BR/&gt; 10000: (7.69484%)&lt;BR/&gt; 2011: (0.180862%)&lt;BR/&gt; 2009: (0.180862%)&lt;BR/&gt; 2008: (0.180862%)&gt;];
}
95--391[label="1;4pkt 4fpkt"];
166--270[label="0.336257;115pkt 115fpkt"];
166--274[label="0.0696203;22pkt 22fpkt"];
166--391[label="0.263158;55pkt 55fpkt"];
166--500[label="0.898734;71pkt 71fpkt"];
166--697[label="0.461538;42pkt 42fpkt"];
166--828[label="1;268pkt 268fpkt"];
166--864[label="0.0380117;13pkt 13fpkt"];
166--882[label="0.0380117;13pkt 13fpkt"];
166--899[label="0.0380117;13pkt 13fpkt"];
166--1474[label="1;342pkt 342fpkt"];
166--1781[label="1;342pkt 342fpkt"];
166--1951[label="0.997076;341pkt 341fpkt"];
274--485[label="0.6;96pkt 96fpkt"];
274--493[label="0.017094;2pkt 2fpkt"];
274--517[label="0.878788;58pkt 58fpkt"];
274--566[label="0.173469;34pkt 34fpkt"];
274--730[label="0.216495;21pkt 21fpkt"];
274--825[label="0.0217391;2pkt 2fpkt"];
274--864[label="0.0348101;11pkt 11fpkt"];
274--882[label="0.0348101;11pkt 11fpkt"];
274--899[label="0.0348101;11pkt 11fpkt"];
274--945[label="0.52459;96pkt 96fpkt"];
274--1143[label="0.164179;33pkt 33fpkt"];
274--1170[label="0.205882;21pkt 21fpkt"];
274--1240[label="1;1pkt 1fpkt"];
274--1325[label="0.157895;6pkt 6fpkt"];
274--1429[label="0.0588235;1pkt 1fpkt"];
274--1474[label="0.0696203;22pkt 22fpkt"];
274--1501[label="0.530387;96pkt 96fpkt"];
274--1707[label="0.157895;6pkt 6fpkt"];
274--1757[label="0.0285714;1pkt 1fpkt"];
274--1781[label="0.0696203;22pkt 22fpkt"];
274--1858[label="0.212121;21pkt 21fpkt"];
274--1951[label="0.0696203;22pkt 22fpkt"];
391--517[label="0.0454545;3pkt 3fpkt"];
391--518[label="1;8pkt 8fpkt"];
391--566[label="0.0153061;3pkt 3fpkt"];
391--730[label="0.0309278;3pkt 3fpkt"];
391--828[label="0.263158;55pkt 55fpkt"];
391--864[label="0.0334928;7pkt 7fpkt"];
391--882[label="0.0334928;7pkt 7fpkt"];
391--899[label="0.0334928;7pkt 7fpkt"];
391--1047[label="0.0952381;2pkt 2fpkt"];
391--1143[label="0.0149254;3pkt 3fpkt"];
391--1162[label="1;6pkt 6fpkt"];
391--1170[label="0.0294118;3pkt 3fpkt"];
391--1233[label="1;13pkt 13fpkt"];
391--1474[label="0.263158;55pkt 55fpkt"];
391--1657[label="1;13pkt 13fpkt"];
391--1684[label="1;24pkt 24fpkt"];
391--1781[label="0.263158;55pkt 55fpkt"];
391--1858[label="0.030303;3pkt 3fpkt"];
391--1894[label="1;24pkt 24fpkt"];
391--1897[label="0.461538;6pkt 6fpkt"];
391--1951[label="0.263158;55pkt 55fpkt"];
500--566[label="0.0253165;2pkt 2fpkt"];
500--730[label="0.0632911;5pkt 5fpkt"];
500--828[label="0.898734;71pkt 71fpkt"];
500--864[label="0.0632911;5pkt 5fpkt"];
500--882[label="0.0632911;5pkt 5fpkt"];
500--899[label="0.0632911;5pkt 5fpkt"];
500--1143[label="0.0253165;2pkt 2fpkt"];
500--1170[label="0.0632911;5pkt 5fpkt"];
500--1210[label="0.0178571;1pkt 1fpkt"];
500--1474[label="0.898734;71pkt 71fpkt"];
500--1781[label="0.898734;71pkt 71fpkt"];
500--1858[label="0.0632911;5pkt 5fpkt"];
500--1951[label="0.898734;71pkt 71fpkt"];
517--697[label="0.0606061;4pkt 4fpkt"];
517--864[label="0.151515;10pkt 10fpkt"];
517--870[label="0.0151515;1pkt 1fpkt"];
517--882[label="0.151515;10pkt 10fpkt"];
517--887[label="0.0151515;1pkt 1fpkt"];
517--899[label="0.151515;10pkt 10fpkt"];
517--903[label="0.0151515;1pkt 1fpkt"];
566--697[label="0.032967;3pkt 3fpkt"];
566--1143[label="0.994898;195pkt 195fpkt"];
697--705[label="1;30pkt 30fpkt"];
697--730[label="0.021978;2pkt 2fpkt"];
697--828[label="0.461538;42pkt 42fpkt"];
697--1143[label="0.032967;3pkt 3fpkt"];
697--1170[label="0.021978;2pkt 2fpkt"];
697--1474[label="0.461538;42pkt 42fpkt"];
697--1781[label="0.461538;42pkt 42fpkt"];
697--1858[label="0.021978;2pkt 2fpkt"];
697--1949[label="0.0571429;2pkt 2fpkt"];
697--1951[label="0.461538;42pkt 42fpkt"];
828--864[label="0.0485075;13pkt 13fpkt"];
828--882[label="0.0485075;13pkt 13fpkt"];
828--899[label="0.0485075;13pkt 13fpkt"];
828--1474[label="1;268pkt 268fpkt"];
828--1781[label="1;268pkt 268fpkt"];
828--1951[label="0.996269;267pkt 267fpkt"];
1233--1657[label="1;13pkt 13fpkt"];
1474--1781[label="1;382pkt 382fpkt"];
1474--1951[label="1;381pkt 381fpkt"];
1684--1894[label="1;24pkt 24fpkt"];
1781--1951[label="1;381pkt 381fpkt"];
</description>
    <slice>
      <filter src_port="10000"/>
      <filter src_ip="200.46.20.248" src_port="80"/>
      <filter dst_ip="155.59.230.136" src_port="80"/>
    </slice>
    <from sec="989038800" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749272,1.82759,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.104.111.1"/>
    </slice>
    <from sec="989038803" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749272,1.82759,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="130.202.211.1"/>
    </slice>
    <from sec="989039673" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749272,1.82759,002,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.35.103.5"/>
    </slice>
    <from sec="989038889" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749272,1.82759,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.178.192.8"/>
    </slice>
    <from sec="989038803" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749272,1.82759,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.97.154.39"/>
    </slice>
    <from sec="989039684" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749272,1.82759,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="102.69.10.61"/>
    </slice>
    <from sec="989038801" usec="0"/>
    <to sec="989038859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749272,1.82759,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="223.74.108.64"/>
    </slice>
    <from sec="989039573" usec="0"/>
    <to sec="989039668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749272,1.82759,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.46.146.74"/>
    </slice>
    <from sec="989038805" usec="0"/>
    <to sec="989039684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749272,1.82759,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="102.41.146.89"/>
    </slice>
    <from sec="989038944" usec="0"/>
    <to sec="989039113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749272,1.82759,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.96.115.116"/>
    </slice>
    <from sec="989039659" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749272,1.82759,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.161.215.126"/>
    </slice>
    <from sec="989039309" usec="0"/>
    <to sec="989039581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749272,1.82759,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.54.22.140"/>
    </slice>
    <from sec="989039290" usec="0"/>
    <to sec="989039641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540173,1.75691,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
636[label="157.117.6.31;d;88pkt 88fpkt", shape=diamond, color=yellow];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.164.148.103:*, 157.117.6.31:80}[57.9545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63134: (0.568182%)&lt;BR/&gt; 57105: (0.568182%)&lt;BR/&gt; 56664: (0.568182%)&lt;BR/&gt; 56504: (0.568182%)&gt;];
}
636--872[label="0.0340909;3pkt 3fpkt"];
636--884[label="0.0909091;8pkt 8fpkt"];
636--889[label="0.0340909;3pkt 3fpkt"];
636--901[label="0.0909091;8pkt 8fpkt"];
636--905[label="0.0340909;3pkt 3fpkt"];
636--914[label="0.0666667;1pkt 1fpkt"];
636--995[label="0.0416667;1pkt 1fpkt"];
636--1081[label="0.136364;3pkt 3fpkt"];
636--1150[label="0.579545;51pkt 51fpkt"];
636--1211[label="0.0769231;1pkt 1fpkt"];
636--1224[label="1;2pkt 2fpkt"];
636--1285[label="0.0571429;2pkt 2fpkt"];
636--1369[label="0.15625;5pkt 5fpkt"];
636--1463[label="0.047619;1pkt 1fpkt"];
636--1525[label="0.0416667;1pkt 1fpkt"];
636--1642[label="0.0769231;1pkt 1fpkt"];
636--1650[label="1;2pkt 2fpkt"];
636--1690[label="0.0555556;2pkt 2fpkt"];
636--1729[label="0.16129;5pkt 5fpkt"];
636--1807[label="0.0434783;1pkt 1fpkt"];
636--1870[label="0.0714286;1pkt 1fpkt"];
636--1901[label="0.0555556;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="157.117.6.31" dst_port="80" src_ip="222.164.148.103"/>
    </slice>
    <from sec="989038806" usec="0"/>
    <to sec="989039618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576123,1.72015,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_349{
style=filled;
color=gray75;
360[label="167.223.133.54;d;280pkt 280fpkt", shape=diamond, color=yellow];
1144[label="217.226.133.98;25pkt 25fpkt", shape=pentagon, color=darkviolet];
1607[label="217.226.133.98;26pkt 26fpkt", shape=invtriangle, color=brown];
stat349[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 167.223.133.54:1024}[54.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (25.8308%)&lt;BR/&gt; 1024: (23.1118%)&lt;BR/&gt; 80: (15.861%)&lt;BR/&gt; 25: (5.58912%)&lt;BR/&gt; 0: (4.53172%)&gt;];
}
360--366[label="0.0421053;4pkt 4fpkt"];
360--427[label="0.0175439;1pkt 1fpkt"];
360--483[label="0.0882353;3pkt 3fpkt"];
360--554[label="0.011236;1pkt 1fpkt"];
360--560[label="0.0147059;2pkt 2fpkt"];
360--611[label="0.0266667;2pkt 2fpkt"];
360--618[label="0.0185185;1pkt 1fpkt"];
360--721[label="0.0416667;2pkt 2fpkt"];
360--824[label="0.0123457;1pkt 1fpkt"];
360--843[label="0.0421053;4pkt 4fpkt"];
360--870[label="0.00357143;1pkt 1fpkt"];
360--871[label="0.00357143;1pkt 1fpkt"];
360--872[label="0.0321429;9pkt 9fpkt"];
360--875[label="0.0714286;20pkt 20fpkt"];
360--876[label="0.00714286;2pkt 2fpkt"];
360--884[label="0.0178571;5pkt 5fpkt"];
360--887[label="0.00357143;1pkt 1fpkt"];
360--888[label="0.00357143;1pkt 1fpkt"];
360--889[label="0.0321429;9pkt 9fpkt"];
360--892[label="0.0714286;20pkt 20fpkt"];
360--893[label="0.00714286;2pkt 2fpkt"];
360--901[label="0.0178571;5pkt 5fpkt"];
360--903[label="0.00357143;1pkt 1fpkt"];
360--904[label="0.00357143;1pkt 1fpkt"];
360--905[label="0.0321429;9pkt 9fpkt"];
360--908[label="0.0714286;20pkt 20fpkt"];
360--909[label="0.00714286;2pkt 2fpkt"];
360--969[label="0.0119048;1pkt 1fpkt"];
360--1034[label="0.0113636;1pkt 1fpkt"];
360--1044[label="0.0277778;1pkt 1fpkt"];
360--1059[label="0.176471;12pkt 12fpkt"];
360--1104[label="0.0166667;1pkt 1fpkt"];
360--1112[label="0.0166667;1pkt 1fpkt"];
360--1127[label="0.0128205;1pkt 1fpkt"];
360--1137[label="0.0144928;1pkt 1fpkt"];
360--1144[label="1;25pkt 25fpkt"];
360--1173[label="0.0153846;1pkt 1fpkt"];
360--1260[label="0.0140845;1pkt 1fpkt"];
360--1272[label="0.0121951;1pkt 1fpkt"];
360--1289[label="0.012987;1pkt 1fpkt"];
360--1353[label="0.0232558;1pkt 1fpkt"];
360--1357[label="0.0140845;1pkt 1fpkt"];
360--1367[label="0.0117647;1pkt 1fpkt"];
360--1452[label="0.0238095;1pkt 1fpkt"];
360--1464[label="0.0135135;1pkt 1fpkt"];
360--1546[label="0.0114943;1pkt 1fpkt"];
360--1561[label="0.176471;12pkt 12fpkt"];
360--1588[label="0.0166667;1pkt 1fpkt"];
360--1601[label="0.012987;1pkt 1fpkt"];
360--1607[label="1;26pkt 26fpkt"];
360--1682[label="0.0123457;1pkt 1fpkt"];
360--1721[label="0.0232558;1pkt 1fpkt"];
360--1723[label="0.0140845;1pkt 1fpkt"];
360--1771[label="0.0238095;1pkt 1fpkt"];
360--1842[label="0.0169492;1pkt 1fpkt"];
360--1893[label="0.0121951;1pkt 1fpkt"];
360--1917[label="0.0238095;1pkt 1fpkt"];
360--1919[label="0.0140845;1pkt 1fpkt"];
360--1948[label="0.0243902;1pkt 1fpkt"];
1144--1607[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="167.223.133.54" dst_port="1024" src_port="53"/>
    </slice>
    <from sec="989038802" usec="0"/>
    <to sec="989039676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749272,1.82759,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.61.34.207"/>
    </slice>
    <from sec="989038803" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749272,1.82759,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.236.212.213"/>
    </slice>
    <from sec="989038801" usec="0"/>
    <to sec="989039685" usec="0"/>
  </anomaly>

</admd:annotation>
